Vulnerability Description
Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a skins file (.bsi), a different vulnerability than CVE-2009-1068.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bsplayer | Bs.Player | 2.51 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/38221Vendor Advisory
- http://www.exploit-db.com/exploits/11154
- http://www.mertsarica.com/?p=511Exploit
- http://www.mertsarica.com/codes/bsplayer_seh_overwrite.pyExploit
- http://www.securityfocus.com/bid/37831Exploit
- http://www.vupen.com/english/advisories/2010/0148Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55708
- http://secunia.com/advisories/38221Vendor Advisory
- http://www.exploit-db.com/exploits/11154
- http://www.mertsarica.com/?p=511Exploit
- http://www.mertsarica.com/codes/bsplayer_seh_overwrite.pyExploit
- http://www.securityfocus.com/bid/37831Exploit
- http://www.vupen.com/english/advisories/2010/0148Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55708
FAQ
What is CVE-2010-2004?
CVE-2010-2004 is a vulnerability with a CVSS score of 9.3 (HIGH). Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Opti...
How severe is CVE-2010-2004?
CVE-2010-2004 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-2004?
Check the references section above for vendor advisories and patch information. Affected products include: Bsplayer Bs.Player.