PT-2011-2399 · Videospirit · Videospirit Lite+1

Xsploitedsec · Published 2011-01-20 · Updated 2011-01-21 · CVE-2011-0500

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VideoSpirit Pro versions 1.6.8.1 and earlier VideoSpirit Lite version 1.4.0.1 and possibly other versions

Description The issue allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long value attribute. This can be demonstrated using a valitem with the mp3 name.

Recommendations For VideoSpirit Pro versions 1.6.8.1 and earlier, consider avoiding the use of .visprj files containing long value attributes in valitem elements until a fix is available. For VideoSpirit Lite version 1.4.0.1 and possibly other versions, restrict the processing of .visprj files to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0500

Affected Products

Videospirit Lite

Videospirit Pro

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/videospirit_visprj.rb · Exploit
• 🔥 https://exploit-db.com/exploits/15936 · Exploit
• 🔥 https://exploit-db.com/exploits/17153 · Exploit
• 🔥 http://exploit-db.com/exploits/15936 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0500 · Security Note
• http://secunia.com/advisories/42876 · Vendor Advisory
• http://secunia.com/advisories/42866 · Vendor Advisory