CVEブラウザに戻る

CVE-2007-0949

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0530%

EPSS Percentile5.96th

Published2007年2月15日

Last Modified2026年4月23日

Vulnerability Description

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.

Affected Platforms (CPE)

📦

Itinysoft Studio

Total Video Player

<= 1.03

References & Advisories

🔗 http://osvdb.org/33187

🔗 http://secunia.com/advisories/23999

🔗 http://www.securityfocus.com/bid/22553

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32479

🔗 https://www.exploit-db.com/exploits/5032

🔗 https://www.exploit-db.com/exploits/5077

🔗 http://osvdb.org/33187

🔗 http://secunia.com/advisories/23999

関連する脆弱性情報

CVE-2009-02619.3

Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a...

CVE-2007-005710.0

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a sh...

CVE-2007-010010.0

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows r...

CVE-2007-011710.0

DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) fil...