RainbowPlayer.RPL.Buffer.Overflow

Release Date May 05, 2009
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer overflow vulnerability in RainbowPlayer. The vulnerability is caused by an error when the vulnerable software handles a malicious .rpl file. It allows a remote attacker to execute arbitrary code via sending a crafted .rpl file.
Affected Products RainbowPlayer 0.91 is vulnerable,other versions may also be affected.
Recommended Actions Currently we are not aware of any vendor supplied patch for this issue.
Coverage IPS VCM
Reference/s http://www.securityfocus.com/bid/34072 (BugTraq)

Fortinet