HTTP: Fat Player Media Player 0.6b0 Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Fat Media Player 0.6b0. A successful attack can lead to arbitrary code execution.

Extended Description

Fat Player is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Fat Player 0.6b is vulnerable; other versions may also be affected.

Affected Products

Fat_player fat_player

References

BugTraq: 42068

CVE: CVE-2009-4962

Short Name
HTTP:STC:DL:FAT-MEDIAPLAYER-RCE
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
0.6b0 CVE-2009-4962 Code Execution Fat Media Player Remote bid:42068
Release Date
11/29/2011
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3336
False Positive
Unknown
Vendors

Fat_player

CVSS Score

9.3

Found a potential security threat?