CVE-2013-7409

ALTO 7.5CVE-2013-7409 · Published 30/10/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
allplayer allplayer	`= 5.6.2= 5.7.0≤ 5.8.1`	No fix yet

Description

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.

References

osvdb.org/show/osvdb/98283
packetstormsecurity.com/files/123554/ALLPlayer-5.6.2-Buffer-Overflow.html · Exploit
packetstormsecurity.com/files/123986/ALLPlayer-5.6.2-SEH-Buffer-Overflow.html · Exploit
packetstormsecurity.com/files/124161/ALLPlayer-5.7-Buffer-Overflow.html · Exploit
packetstormsecurity.com/files/125519/ALLPlayer-5.8.1-Buffer-Overflow.html · Exploit
exploit-db.com/exploits/28855 · Exploit
exploit-db.com/exploits/29549 · Exploit
exploit-db.com/exploits/29798 · Exploit
exploit-db.com/exploits/32041 · Exploit
exploit-db.com/exploits/32074 · Exploit
securityfocus.com/bid/62926

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free