BlazeVideo HDTV Player 3.5 Overflow

!/usr/bin/python Title: BlazeVideo HDTV Player = 3.5 PLF Playlist File Remote Heap Overflow Exploit Summary: BlazeVideo HDTV Player BlazeDTV is a full-featured and easy-to-use HDTV Player software, combining HDTV playback, FM receiving, video record and DVD playback functions. You can make...

BlazeVideo HDTV Player PLF文件堆栈缓冲区溢出漏洞

BUGTRAQ ID: 30442 CNCAN ID：CNCAN-2008073108 BlazeVideo HDTV Player是一款支持HDTV播放的媒体播放程序。 BlazeVideo HDTV Player处理播放列表文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的PLF文件，诱使用户使用BlazeVideo HDTV Player处理，可触发此漏洞。 BlazeVideo HDTV Player 3.5 目前没有解决方案提供： http://www.blazevideo.com/ /Blaze Video HDTV Player V 3.5...

BlazeVideo HDTV Player 3.5 - .PLF File Stack Buffer Overflow

BlazeVideo HDTV Player 3.5 - .PLF File Stack Buffer Overflow source: https://www.securityfocus.com/bid/30442/info BlazeVideo HDTV Player is prone to a stack-based buffer-overflow vulnerability because the application fails to handle malformed playlist files. An attacker can exploit this issue to...

CVE-2006-6396

Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist, a different product than CVE-2006-6199. NOTE: it was later reported that 3.5 is also affected...

CVE-2006-6396

CVE-2006-6396 is a stack-based buffer overflow in BlazeVideo HDTV Player 2.1 (and possibly earlier; 3.5 noted) that allows remote code execution via a long filename in a PLF playlist. Public records indicate the issue affects BlazeVideo BlazeDVD products with PLF handling vulnerabilities, and mul...

EUVD-2006-6379

Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist, a different product than CVE-2006-6199. NOTE: it was later reported that 3.5 is also affected...

CVE-2006-6396

Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist, a different product than CVE-2006-6199. NOTE: it was later reported that 3.5 is also affected...

blazevideo.txt

/ ======================================================================== 0-day BlazeVideo HDTV Player 30 days of Media Player Exploits by Greg Linares Discovered and Reported By: Greg Linares [email protected] Reported Exploit Date: 12/1/2006 / include include include int mainint argc, ch...