CVSS: 9.3EPSS: 47%CPEs: 3EXPL: 4CVE-2010-3138 – Media Player Classic 1.3.2189.0 - 'iacenc.dll' DLL Hijacking
https://notcve.org/view.php?id=CVE-2010-3138
27 Aug 2010 — Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka "Indeo Codec Insecure Library Loading Vulnerability." NOTE: some of these details are obtained from third party information. Una vulnerabilidad de ruta (path) de búsqueda no... • https://www.exploit-db.com/exploits/14765 •
CVSS: 9.3EPSS: 5%CPEs: 2EXPL: 2CVE-2010-2009
https://notcve.org/view.php?id=CVE-2010-2009
21 May 2010 — Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party information. Desbordamiento de búfer basado en pila en la librería multimedia de BS.Global BS.Player v2.51 build 1022, v2.41 build 1003, y posiblemente otras versiones. Permite a atacantes remotos asistidos por el usuario... • http://secunia.com/advisories/38221 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 15%CPEs: 1EXPL: 6CVE-2010-2004 – BS.Player 2.51 - Overwrite (SEH)
https://notcve.org/view.php?id=CVE-2010-2004
20 May 2010 — Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a skins file (.bsi), a different vulnerability than CVE-2009-1068. Desbordamiento de búffer basado en pila de BS.Global BS.Player v2.51 Build 1022 Free y posiblemente otras versiones, permite a atacantes remotos asistidos por el usuario a través del parámetro Skin en la sección Options de un fich... • https://www.exploit-db.com/exploits/11146 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 8%CPEs: 1EXPL: 2CVE-2008-6583 – BS.Player 2.27 Build 959 - '.srt' File Buffer Overflow (PoC)
https://notcve.org/view.php?id=CVE-2008-6583
03 Apr 2009 — Buffer overflow in BS.player 2.27 build 959 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .SRT file. Desbordamiento de búfer en BS.player v2.27 build 959 permite a atacantes remotos producir una denegación de servicio (caída) y posiblemente ejecutar código de manera arbitraria a través de una cadena larga en un fichero .SRT. • https://www.exploit-db.com/exploits/5455 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 57%CPEs: 2EXPL: 3CVE-2009-1068 – BS.Player 2.34 - '.bsl' Universal Overwrite (SEH)
https://notcve.org/view.php?id=CVE-2009-1068
24 Mar 2009 — Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long hostname in a .bsl playlist file. Desbordamiento de búfer basado en pila en BS.Player (bsplayer) v2.32 Build 975 Free y v2.34 Build 980 PRO y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de u... • https://www.exploit-db.com/exploits/8251 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •