CVE-2006-6288
- State
- Published
- Severity
- Not scored
- Published
- Dec 4, 2006
- Updated
- Aug 7, 2024
- Reserved
- Dec 4, 2006
Description
Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via (1) a playlist file with long song names, because of an overflow in the CPL_AddPrefixedFile function in CPI_Playlist.c; (2) a skin file with long button names, because of an overflow in the main_skin_check_ini_value function in skin.c; and (3) a skin file with long bitmap filenames, because of an overflow in the main_skin_open function in skin.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- coolplayer-mainskinopen-bo(30863)vdb-entry
- 23360third-party-advisory
- http://coolplayer.cvs.sourceforge.net/coolplayer/Main/stdafx.h?view=log
- 20061213 Coolplayer buffer overflow vulnerabilitiesmailing-list
- ADV-2006-4806vdb-entry
- http://sourceforge.net/project/shownotes.php?group_id=31900&release_id=467783
- 20071227 Re: TotalPlayer 3.0 .m3u crashmailing-list
- 4839exploit
- 20071227 Re: Re: TotalPlayer 3.0 .m3u crashmailing-list
- coolplayer-mainskincheck-bo(30861)vdb-entry
- 20071227 Re: Re: Re: TotalPlayer 3.0 .m3u crashmailing-list
- 21396vdb-entry
- coolplayer-unspecified-bo(30658)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.