Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file is opened, the application converts input to Unicode and copies it to a fixed-size stack buffer without proper bounds checking. This allows an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.5 | CVE-2011-10025 |
Exploitation
To exploit this vulnerability, an attacker must create a specially crafted .m3u playlist file that, when opened by Subtitle Processor 7.7.1, triggers the buffer overflow. This can lead to arbitrary code execution, allowing the attacker to gain control over the affected system.
Affected Products
- Subtitle Processor 7.7.1: The application is vulnerable due to improper bounds checking in its .m3u file parser.
Mitigation
To mitigate this vulnerability, users should avoid opening untrusted .m3u files and consider updating to a patched version of Subtitle Processor if available. Additionally, implementing security measures such as using antivirus software can help detect and prevent exploitation attempts.