This application requires Javascript for optimal performance.

Media.Jukebox.M3U.File.Handling.Buffer.Overflow

Release Date

Jan 14, 2010

Severity

critical

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attempt to exploit a buffer-overflow vulnerability in Media Jukebox.

This vulnerability is caused by an error in the vulnerable software when processing malformed ".m3u" (M3U) files. It allows a remote attacker to execute arbitrary code via sending a crafted M3U file.

Affected Products

MultiMedia Jukebox 4.0 Build 020124

Recommended Actions

Currently we are not aware of any officially supplied patch for this issue.

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-2650

Reference: VID-18088