Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c7jj-cg79-r337

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name.

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name.

EPSS

Процентиль: 98%
0.64306
Средний

Дефекты

CWE-119

Связанные уязвимости

nvd
около 15 лет назад

Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "value" attribute, as demonstrated using a valitem with the mp3 name.

EPSS

Процентиль: 98%
0.64306
Средний

Дефекты

CWE-119