critical9.3Public exploit code
CVE-2011-5170
Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CCMPlayer 1.5 - '.m3u' Stack Buffer Overflow (Metasploit)2011-12-03 · local · windows · Verified
- CCMPlayer 1.5 - '.m3u' Stack Buffer Overflow (SEH) (Metasploit)2011-11-30 · local · windows · Verified
Impact
Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Castillobueno | Ccmplayer | Version 1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/77453
- http://www.exploit-db.com/exploits/18178
- http://www.exploit-db.com/exploits/18195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71573
- http://osvdb.org/77453
- http://www.exploit-db.com/exploits/18178
- http://www.exploit-db.com/exploits/18195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71573