Skip to main content

Nokia Multimedia Player Playlist Handling Buffer Overflow Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 13 Jan 2011 5644 Views

RISK: Medium Risk

A vulnerability has been identified in Nokia Multimedia Player, which could be exploited by attackers to execute arbitrary code. This issue is caused by a buffer overflow error when processing playlists (e.g. ".npl") containing overly long data, which could be exploited by attackers to crash an affected application or compromise a vulnerable system by tricking a user into opening a malicious playlist file.

Vulnerability has no patch available.Successful exploitation allows execution of arbitrary code.


Impact

  • Remote Code Execution

System / Technologies affected

  • Nokia Multimedia Player version 1.0 and prior

Solutions

  • It is not aware of any vendor-supplied patch.
  • Workaround: Do not open playlist files from untrusted sources.


Vulnerability Identifier

  • No CVE information is available

Source


Related Link