PT-2010-1568 · Brothersoft · Bmxplay

Sirgod · Publicado 2010-03-29 · Atualizado 2017-09-19 · CVE-2009-4759

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BrotherSoft BMXPlay version 0.4.4b

Description The issue is related to a buffer overflow that can be triggered by a long string in a .BMX file, potentially allowing remote attackers to cause the application to crash or possibly execute arbitrary code.

Recommendations For BrotherSoft BMXPlay version 0.4.4b, consider avoiding the use of .BMX files with long strings until a patch is available. As a temporary workaround, restrict the handling of .BMX files to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-4759

Produtos afetados

Bmxplay

Referências · 4

• 🔥 http://exploit-db.com/exploits/8607 · Exploit
• 🔥 https://exploit-db.com/exploits/8607 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4759 · Nota de Segurança
• http://securityfocus.com/bid/34810 · Nota