HTTP: Malformed ogg File Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Malformed ogg File. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected user.

Extended Description

Media Player Classic is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application. Remote code execution may also be possible, but this has not been confirmed. Media Player Classic 6.4.9.1 is vulnerable; other versions may also be affected.

Affected Products

Guliverkli media_player_classic

References

BugTraq: 25969 36465 47413 47414 54465

CVE: CVE-2009-4635

Short Name
HTTP:STC:DL:MAL-OGG-FILE
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Buffer CVE-2007-5301 CVE-2008-4610 CVE-2009-3378 CVE-2009-4631 CVE-2009-4632 CVE-2009-4633 CVE-2009-4634 CVE-2009-4635 CVE-2009-4636 CVE-2009-4637 CVE-2009-4638 CVE-2009-4639 CVE-2009-4640 File Malformed Overflow bid:25969 bid:36465 bid:47413 bid:47414 bid:54465 ogg
Release Date
12/05/2012
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3336
False Positive
Unknown
Vendors

Guliverkli

CVSS Score

9.3

4.3

10.0

6.8

5.8

5.0

Found a potential security threat?