Release DateJun 23, 2009 |
Severitycritical |
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems. |
DescriptionThis indicates an attack attempt against a buffer-overflow vulnerability in BS Player.The vulnerability is caused by an error when the vulnerable software handles a malicious .bsl playlist. It allows a remote attacker to execute arbitrary code via sending a crafted .bsl file. |
Affected ProductsBS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier |
Recommended ActionsUpgrade to the latest version 2.36 Build 990. |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2009-1068 |
Reference/shttp://www.securityfocus.com/bid/34190 (BugTraq) |