Summary
This host is installed with SopCast and is prone to buffer overflow vulnerability.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts may lead to a denial-of-service condition.
Impact Level: System/Application
Solution
No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.
Insight
The flaw is due to a boundary error in the WebPlayer ActiveX Control when handling the 'ChannelName' property can be exploited to cause a stack based buffer overflow via a specially crafted 'sop://' URL string.
Affected
SopCast version 3.4.7.45585
References
Severity
Classification
-
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Audition '.ses' Multiple Buffer Overflow Vulnerabilities (Windows)
- Adobe Flash Player Multiple Vulnerabilities - Mar09 (Win)
- ALZip MIM File Processing Buffer Overflow Vulnerability
- Adobe Reader 'File Extension' Buffer Overflow Vulnerability (Mac OS X)
- ActiveFax RAW Server Multiple Buffer Overflow Vulnerabilities