NVD Vulnerability Detail

CVE-2013-7409

Summary	Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.
Publication Date	Oct. 31, 2014, 12:55 a.m.
Registration Date	Jan. 26, 2021, 3:50 p.m.
Last Update	Nov. 21, 2024, 11 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://osvdb.org/show/osvdb/98283
2	http://osvdb.org/show/osvdb/98283
3	http://packetstormsecurity.com/files/123554/ALLPlayer-5.6.2-Buffer-Overflow.html	Exploit
4	http://packetstormsecurity.com/files/123554/ALLPlayer-5.6.2-Buffer-Overflow.html	Exploit
5	http://packetstormsecurity.com/files/123986/ALLPlayer-5.6.2-SEH-Buffer-Overflow.html	Exploit
6	http://packetstormsecurity.com/files/123986/ALLPlayer-5.6.2-SEH-Buffer-Overflow.html	Exploit
7	http://packetstormsecurity.com/files/124161/ALLPlayer-5.7-Buffer-Overflow.html	Exploit
8	http://packetstormsecurity.com/files/124161/ALLPlayer-5.7-Buffer-Overflow.html	Exploit
9	http://packetstormsecurity.com/files/125519/ALLPlayer-5.8.1-Buffer-Overflow.html	Exploit
10	http://packetstormsecurity.com/files/125519/ALLPlayer-5.8.1-Buffer-Overflow.html	Exploit
11	http://www.exploit-db.com/exploits/28855	Exploit
12	http://www.exploit-db.com/exploits/28855	Exploit
13	http://www.exploit-db.com/exploits/29549	Exploit
14	http://www.exploit-db.com/exploits/29549	Exploit
15	http://www.exploit-db.com/exploits/29798	Exploit
16	http://www.exploit-db.com/exploits/29798	Exploit
17	http://www.exploit-db.com/exploits/32041	Exploit
18	http://www.exploit-db.com/exploits/32041	Exploit
19	http://www.exploit-db.com/exploits/32074	Exploit
20	http://www.exploit-db.com/exploits/32074	Exploit
21	http://www.securityfocus.com/bid/62926
22	http://www.securityfocus.com/bid/62926

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

ALLPlayer におけるバッファオーバーフローの脆弱性

Title	ALLPlayer におけるバッファオーバーフローの脆弱性
Summary	ALLPlayer には、バッファオーバーフローの脆弱性が存在します。
Possible impacts	第三者により、.m3u (playlist) ファイルの過度に長い文字列を介して、サービス運用妨害 (クラッシュ) 状態にされる、および任意のコードを実行される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Oct. 9, 2013, midnight
Registration Date	Nov. 7, 2014, 12:06 p.m.
Last Update	Nov. 7, 2014, 12:06 p.m.

Affected System

ALLPlayer

ALLPlayer 5.6.2 から 5.8.1

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-7409	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7409
National Vulnerability Database (NVD)
2	CVE-2013-7409	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7409

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
ALLPlayer
1	Top Page	http://www.allplayer.org/

その他

No	Name	URL
関連文書
1	ALLPlayer 5.6.2 Buffer Overflow	http://packetstormsecurity.com/files/123554/ALLPlayer-5.6.2-Buffer-Overflow.html

Change Log

No	Changed Details	Date of change
0	[2014年11月07日] 掲載	Feb. 17, 2018, 10:37 a.m.