vendor:
Player.m3u
by:
John Doe
9,3
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Player.m3u
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2020
Buffer Overflow Vulnerability in Player.m3u File
A buffer overflow vulnerability exists in the Player.m3u file when a maliciously crafted file is opened. The vulnerability is caused by the lack of proper validation of the size of user-supplied data before copying it to a fixed-length buffer. An attacker can exploit this vulnerability by creating a specially crafted Player.m3u file and sending it to the victim. When the victim opens the file, the attacker can execute arbitrary code on the victim's system.
Mitigation:
The best way to mitigate this vulnerability is to ensure that all user-supplied data is properly validated before being copied to a fixed-length buffer.
