CVE-2012-10031

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

BlazeVideo HDTV Player Pro 安全漏洞

BlazeVideo HDTV Player Pro is a video player from BlazeVideo USA. A security vulnerability exists in BlazeVideo HDTV Player Pro version v6.6.0.3, which originates from improper handling of .plf file inputs and can lead to a buffer overflow and arbitrary code execution...