BlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA() to extract a filename from a URL-like string. The returned value is then copied to a fixed-size stack buffer using an inline strcpy call without bounds checking. If the input exceeds the buffer size, this leads to a stack overflow and potential arbitrary code execution under the context of the user.

N/A

栈缓冲区溢出

BlazeVideo HDTV Player Pro 安全漏洞

BlazeVideo HDTV Player Pro是美国BlazeVideo公司的一个视频播放器。 BlazeVideo HDTV Player Pro v6.6.0.3版本存在安全漏洞，该漏洞源于未正确处理.plf文件输入，可能导致缓冲区溢出和任意代码执行。

N/A

N/A