BS.Player.BSL.Buffer.Overflow

Release Date Jun 23, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in BS Player. The vulnerability is caused by an error when the vulnerable software handles a malicious .bsl playlist. It allows a remote attacker to execute arbitrary code via sending a crafted .bsl file.
Affected Products BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier
Recommended Actions Upgrade to the latest version 2.36 Build 990.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-1068
Reference/s http://www.securityfocus.com/bid/34190 (BugTraq)

Fortinet