critical9.3Public exploit code
CVE-2011-0499
Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VeryTools VideoSpirit Pro 1.70 - '.visprj' Local Buffer Overflow (Metasploit)2011-04-11 · local · windows · Verified
- VeryTools VideoSpirit Pro 1.68 - Local Buffer Overflow2011-01-08 · local · windows · Verified
Impact
Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "name" attribute. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Verytools | Videospirit Lite | through 1.4.0.1 |
| Verytools | Videospirit Pro | through 1.6.8.1 Version 1.68 |