PT-2009-3604 · Gom · Gom Encoder

Encrypt3D.M!Nd · Published 2009-03-20 · Updated 2018-10-10 · CVE-2009-1022

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GOM Encoder versions 1.0.0.11 and earlier

Description The issue is related to a heap-based buffer overflow in the Preview/Set Segment function, allowing remote attackers to cause a denial of service or execute arbitrary code via a long text field in a subtitle (.srt) file.

Recommendations For versions 1.0.0.11 and earlier, update to a version that contains a fix for this issue, as using a long text field in a subtitle file can lead to memory corruption and application crash or execution of arbitrary code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1022

Affected Products

Gom Encoder

References · 9

• 🔥 https://exploit-db.com/exploits/8225 · Exploit
• 🔥 http://securityfocus.com/bid/34120 · Exploit
• http://secunia.com/advisories/34314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1022 · Security Note
• http://vupen.com/english/advisories/2009/0735 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49252 · Note
• http://security.bkis.vn/?p=352 · Note
• http://securityfocus.com/archive/1/501846/100/0/threaded · Note
• http://osvdb.org/52677 · Note