KLA10374 ACE vulnerability in UiTV UiPlayer

A buffer overflow was found in UiTV UiPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename parameter.

Original advisories

Related products

UiTV-UiPlayer

CVE list

CVE-2009-2970 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• UiTV UiPlayer versions earlier than 1.0.0.7