Muse.PLS.Buffer.Overflow

Description

This indicates an attack attempt against a buffer-overflow vulnerability in Muse Player.
The vulnerability is caused by an error when the vulnerable software handles a malicious playlist file. It allows a remote attacker to execute arbitrary code via sending a crafted .PLS file.

Affected Products

MUSE version 1.5.0.001
MUSE version 4.9.0.006

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor-supplied patches for this issue.

References