high7.5Public exploit code
CVE-2006-6396
Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow2006-12-01 · local · windows · Verified
Impact
Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist, a different product than CVE-2006-6199. NOTE: it was later reported that 3.5 is also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blazevideo | Hdtv Player | through 2.1 Version 3.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23192
- http://www.securityfocus.com/bid/21399
- http://www.securityfocus.com/bid/30442
- https://www.exploit-db.com/exploits/2880
- http://secunia.com/advisories/23192
- http://www.securityfocus.com/bid/21399
- http://www.securityfocus.com/bid/30442
- https://www.exploit-db.com/exploits/2880