CVE-2006-6261
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD
Description
Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) M3u or (2) M3u-8 file; or a (3) crafted PLS file with a long value in the (a) NumberofEntries, (b) Length (aka Length1), (c) Filename (aka File1), (d) Title (aka Title1) field, or other unspecified fields.
Affected (1)
Products: Quinnware: Quintessential Player
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version ≤ 4.50.1.82 |
| Running on/with | Platform Versions |
|---|---|
Microsoft Windows 2000 | All versions |
Microsoft Windows 95 | All versions |
Microsoft Windows 98 | All versions |
Microsoft Windows Me | All versions |
Microsoft Windows Nt | Version 4.0 |
Microsoft Windows Xp | All versions |
References (6)
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.