← Advisories

ViPlay3 <= 3.00 (.vpl) Local Stack Overflow PoC

Medium
Advisory ID
ZSL-2009-4913
Release Date
08 May 2009
Vendor
Affected Version
3.00
Tested On
Microsoft Windows XP Professional SP3 (English)
Summary

ViPlay3 is a freeware movie player designed to play the most popular movie types using overlaying technology for a faster and more efficient way of video playback.

Description

URUWorks ViPlay3 is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input (.vpl file). Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Proof of Concept
Disclosure Timeline
N/A
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
08.05.2009Initial release
25.10.2021Added reference [5], [6] and [7]