CVE-2007-6533: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message...

Unicode buffer-overflow in Zoom Player 6.00b2

Luigi Auriemma Application: Zoom Player http://www.inmatrix.com Versions: = v6.00 beta 2 and naturally all the stable v5 versions Platforms: Windows Bug: unicode buffer-overflow Exploitation: local Date: 24 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introductio...

Zoom Player畸形ZPL文件缓冲区溢出漏洞

BUGTRAQ ID: 27007 Zoom Player是Windows PC平台上的DVD和媒体播放器。 Zoom Player在创建消息时存在漏洞，成功利用这个漏洞的攻击者可以导致拒绝服务或执行任意指令。 Zoom Player中用于创建错误消息的函数中存在unicode溢出漏洞。如果攻击者创建了畸形的ZPL文件并在其中包含有指向有PLS扩展名文件的HTTP链接的话，就可以强制程序使用wsprintf创建“Unable to play %s”错误消息。 Inmatrix Zoom Player 6.00 beta2 Inmatrix Zoom Player 5 Inmatrix...

Zoom Player 3.30/5/6 - '.ZPL' Error Message Arbitrary Code Execution

source: https://www.securityfocus.com/bid/27007/info Zoom Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application or to crash the application, denying further service to...

Zoom Player 3.3056 - .ZPL Error Message Arbitrary Code Execution

Zoom Player 3.3056 - .ZPL Error Message Arbitrary Code Execution source: https://www.securityfocus.com/bid/27007/info Zoom Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected...