Overview
When passed an incorrectly formatted sound file, the Oliver Debon (freeware) Flash plug-in is reportedly vulnerable to a buffer overflow.
Description
The DefineSound tag in a sound file passes data to a Flash plug-in. If this tag specifies fewer samples than are actually present in the data, a buffer overflow may occur in the plug-in produced by Oliver Debon. |
Impact
The attacker may crash browser or execute commands as the user running the Flash plug-in. |
Solution
Because the software is unsupported and no patches are available, CERT/CC is unaware of any corrective measures. |
Vendor Information
451096
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Neal Krawetz authored the original description of the vulnerability.
This document was last modified by Tim Shimeall
Other Information
| CVE IDs: | CVE-2001-0127 |
| Severity Metric: | 0.08 |
| Date Public: | 2001-01-05 |
| Date First Published: | 2001-05-17 |
| Date Last Updated: | 2001-06-20 13:47 UTC |
| Document Revision: | 12 |