SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses with an overly long Content-Type header. This vulnerability arises from improper bounds checking, allowing attackers to overwrite the Structured Exception Handler (SEH) and execute arbitrary code. Exploitation requires the victim to open a media file that triggers an HTTP request to a malicious server.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.6 | CVE-2011-10022 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious HTTP response with a specially designed Content-Type header. The victim must then open a media file that triggers an HTTP request to the attacker’s server, leading to the execution of arbitrary code on the victim’s machine.
Affected Products
- SPlayer version 3.7 and earlier: Vulnerable to stack-based buffer overflow due to improper handling of HTTP Content-Type headers.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of SPlayer that addresses this issue. Additionally, users should avoid opening media files from untrusted sources to reduce the risk of exploitation.