Tombkeeper

A remote code execution issue exists in the Bluetooth stack due to incorrect handling of a large number of service description requests. This could allow an attacker to run code with elevated privileges, potentially taking complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

A remote overflow issue exists due to the application's failure to perform proper bounds checking, resulting in a buffer overflow. This can be triggered by a specially crafted *.m3u and/or *.pls file with an ending filename having the *.wma extension. A remote attacker can cause arbitrary code execution or crash the application, leading to a loss of integrity and/or availability.