CVE

Id
24306  
CVE No.
CVE-2007-0949  
Status
Candidate  
Description
Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.  
Phase
Assigned (20070214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
238599 24306 CVE-2007-0949 MILW0RM:5032  View
238600 24306 CVE-2007-0949 URL:http://www.milw0rm.com/exploits/5032  View
238601 24306 CVE-2007-0949 MILW0RM:5077  View
238602 24306 CVE-2007-0949 URL:http://www.milw0rm.com/exploits/5077  View
238603 24306 CVE-2007-0949 BID:22553  View
238604 24306 CVE-2007-0949 URL:http://www.securityfocus.com/bid/22553  View
238605 24306 CVE-2007-0949 OSVDB:33187  View
238606 24306 CVE-2007-0949 URL:http://osvdb.org/33187  View
238607 24306 CVE-2007-0949 SECUNIA:23999  View
238608 24306 CVE-2007-0949 URL:http://secunia.com/advisories/23999  View
238609 24306 CVE-2007-0949 XF:totalvideoplayer-m3u-bo(32479)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52878 JVNDB-2007-001570 Fullaspsite ASP ホスティングサイトの listmain.asp における SQL インジェクションの脆弱性 Fullaspsite ASP ホスティングサイトの listmain.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2007-0951 24306 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001570.html  View