PLF.Playlist.Buffer.Overflow

description-logoDescription

This indicates an attack attempt to exploit a buffer-overflow vulnerability in BlazeVideo BlazeDVD software.
The vulnerability is caused by an error when the vulnerable software handles a malicious playlist. It allows a remote attacker to execute arbitrary code via sending a crafted .PLF file with long filename.

affected-products-logoAffected Products

BlazeVideo HDTV versions 2.1 and prior
BlazeDVD Standard and Professional 5.0

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Uninstall or disable the affected software until patch is released
Do not open untrusted playlists.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2021-04-06 18.052 Sig Added
2020-09-02 16.916