Release DateJan 07, 2012 |
Severityhigh |
ImpactSystem Compromise: Remote attackers can remotely execute arbitrary code within the context of the application. |
DescriptionThis indicates an attack attempt against a Buffer Overflow vulnerability in CCMPlayer.The vulnerability is caused by an error when the vulnerable software handles a malicious m3u file. It allows a remote attacker to execute arbitrary code via sending a crafted m3u file. |
Affected ProductsCCMPlayer 1.5 |
Recommended ActionsCurrently we are not aware of any vendor supplied patch for this issue. |
Coverage IPS
VCM |
Reference/shttp://osvdb.org/show/osvdb/77453http://www.exploit-db.com/exploits/18178/ |