Published: 27/04/2008 Updated: 29/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a long subtitle file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
artur sikora subedit player 4066
artur sikora subedit player 4056

/===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland It does not perform any boundery checks | on supplied subtitles This causes buffer overrun and | throwing access violation exception on group of instructions: | | | 005F7C1E | 8902 ...

CWE-119 http://www.securityfocus.com/bid/28858 http://secunia.com/advisories/29904 http://www.vupen.com/english/advisories/2008/1306 https://exchange.xforce.ibmcloud.com/vulnerabilities/41913 https://www.exploit-db.com/exploits/5472 https://nvd.nist.gov https://www.exploit-db.com/exploits/5472/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-1973

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect