critical9.3Public exploit code
CVE-2011-0500
Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VeryTools VideoSpirit Pro 1.70 - '.visprj' Local Buffer Overflow (Metasploit)2011-04-11 · local · windows · Verified
- VeryTools VideoSpirit Pro 1.68 - Local Buffer Overflow2011-01-08 · local · windows · Verified
Impact
Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Verytools | Videospirit Lite | Version 1.4.0.1 |
| Verytools | Videospirit Pro | through 1.68 Version 1.6.8.1 |