high7.5Public exploit code
CVE-2006-6199
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute arbitrary code via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BlazeDVD 6.2 - '.plf' Local Buffer Overflow (SEH)2013-10-28 · local · windows · Verified
- BlazeDVD Pro Player 6.1 - Direct RET Local Stack Buffer Overflow2013-07-16 · local · windows · Verified
- BlazeDVD 6.1 - '.PLF' File (ASLR + DEP Bypass) (Metasploit)2012-12-31 · local · windows · Verified
- BlazeDVD 5.1 - PLF Buffer Overflow (Metasploit)2010-11-11 · local · windows · Verified
- BlazeDVD 5.1 (Windows 7) - '.plf' File Stack Buffer Overflow (ASLR + DEP Bypass)2010-06-17 · local · windows · Verified
- BlazeDVD 5.1/HDTV Player 6.0 - '.plf' Universal Buffer Overflow (SEH)2009-08-04 · local · windows · Verified
- BlazeDVD 5.1 Professional - '.plf' Local Buffer Overflow (SEH)2009-08-03 · local · windows · Verified
- BlazeDVD 5.0 - '.PLF' Playlist File Remote Buffer Overflow2008-08-10 · remote · windows · Verified
- BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow2006-12-01 · local · windows · Verified
Impact
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blazevideo | Blaze Dvd | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23041
- http://whitestar.linuxbox.org/pipermail/exploits/2006-December/000065.html
- http://www.exploit-db.com/exploits/23783
- http://www.exploit-db.com/exploits/26889
- http://www.osvdb.org/30770
- http://www.securityfocus.com/bid/21337
- http://www.vupen.com/english/advisories/2006/4764
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30567
- https://www.exploit-db.com/exploits/2880
- http://secunia.com/advisories/23041
- http://whitestar.linuxbox.org/pipermail/exploits/2006-December/000065.html
- http://www.exploit-db.com/exploits/23783
- http://www.exploit-db.com/exploits/26889
- http://www.osvdb.org/30770
- http://www.securityfocus.com/bid/21337
- http://www.vupen.com/english/advisories/2006/4764
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30567
- https://www.exploit-db.com/exploits/2880