critical9.3Public exploit code
CVE-2008-5735
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a ski…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CoolPlayer 2.19 - '.Skin' Local Buffer Overflow2008-12-22 · local · windows · Verified
- CoolPlayer 2.19 - '.Skin' Local Buffer Overflow2008-12-21 · local · windows · Verified
Impact
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coolplayer | Coolplayer | Versions 2.17, 2.18, 2.19 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4813
- http://www.bmgsec.com.au/advisory/43/
- http://www.securityfocus.com/archive/1/499480/100/0/threaded
- http://www.securityfocus.com/bid/32947
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47527
- https://www.exploit-db.com/exploits/7536
- https://www.exploit-db.com/exploits/7547
- http://securityreason.com/securityalert/4813
- http://www.bmgsec.com.au/advisory/43/
- http://www.securityfocus.com/archive/1/499480/100/0/threaded
- http://www.securityfocus.com/bid/32947
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47527
- https://www.exploit-db.com/exploits/7536
- https://www.exploit-db.com/exploits/7547