Описание
Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:coolplayer:coolplayer:217:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.10216
Средний
5 Medium
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
почти 4 года назад
Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file.
EPSS
Процентиль: 93%
0.10216
Средний
5 Medium
CVSS2
Дефекты
CWE-119