critical9.3Public exploit code
CVE-2011-5006
Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QQPLAYER Player 3.2 - PICT PnSize Buffer Overflow Windows (ASLR + DEP Bypass) (Metasploit)2011-11-21 · local · windows_x86
Impact
Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qqplayer | Qqplayer | Version 3.2.845 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/46924
- http://www.exploit-db.com/exploits/18137
- http://www.osvdb.org/77266
- http://www.securityfocus.com/bid/50739
- http://secunia.com/advisories/46924
- http://www.exploit-db.com/exploits/18137
- http://www.osvdb.org/77266
- http://www.securityfocus.com/bid/50739