PT-2009-3604 · Gom · Gom Encoder

Encrypt3D.M!Nd · Publicado 2009-03-20 · Atualizado 2018-10-10 · CVE-2009-1022

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GOM Encoder versions 1.0.0.11 and earlier

Description The issue is related to a heap-based buffer overflow in the Preview/Set Segment function, allowing remote attackers to cause a denial of service or execute arbitrary code via a long text field in a subtitle (.srt) file.

Recommendations For versions 1.0.0.11 and earlier, update to a version that contains a fix for this issue, as using a long text field in a subtitle file can lead to memory corruption and application crash or execution of arbitrary code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1022

Produtos afetados

Gom Encoder

Referências · 9

• 🔥 https://exploit-db.com/exploits/8225 · Exploit
• 🔥 http://securityfocus.com/bid/34120 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49252 · Nota
• http://secunia.com/advisories/34314 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1022 · Nota de Segurança
• http://security.bkis.vn/?p=352 · Nota
• http://securityfocus.com/archive/1/501846/100/0/threaded · Nota
• http://osvdb.org/52677 · Nota
• http://vupen.com/english/advisories/2009/0735 · Aviso do Fabricante