PT-2009-4952 · Hamster · Hamster Audio Player
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Hamster Audio Player version 0.3a
Description
The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved by providing a long string in either a .m3u or .hpl playlist file.
Recommendations
For Hamster Audio Player version 0.3a, update to a version that fixes this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hamster Audio Player