Vulnerability Details CVE-2006-6251
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.789
EPSS Ranking 99.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/23182
- http://www.kb.cert.org/vuls/id/311192
- http://www.securityfocus.com/bid/21363
- http://www.vupen.com/english/advisories/2006/4783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30629
- https://www.exploit-db.com/exploits/2870
- https://www.exploit-db.com/exploits/2872
- http://secunia.com/advisories/23182
- http://www.kb.cert.org/vuls/id/311192
- http://www.securityfocus.com/bid/21363
- http://www.vupen.com/english/advisories/2006/4783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30629
- https://www.exploit-db.com/exploits/2870
- https://www.exploit-db.com/exploits/2872