CNNVD-202508-375 Information
CNNVD ID
CNNVD-202508-375
Related CVE
- CNNVD Published: 2025-08-05
Description (Chinese)
BlazeVideo HDTV Player Pro是美国BlazeVideo公司的一个视频播放器。 BlazeVideo HDTV Player Pro v6.6.0.3版本存在安全漏洞，该漏洞源于未正确处理.plf文件输入，可能导致缓冲区溢出和任意代码执行。
Description (English)
BlazeVideo HDTV Player Pro is a video player for BlazeVideo in the United States. Release BlazeVideo HDTV Player Pro v6.0.3 contains a security loophole, which stems from incorrect processing of .plf file input, which could lead to a buffer zone spill and arbitrary code execution.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
BlazeVideo
Published
2025-08-05
Last Modified
2026-02-24
References
https://www.exploit-db.com/exploits/23052 https://blazevideo.com/help_center/hdtv-help/Technical-Support.html https://web.archive.org/web/20100302202333/ https://www.exploit-db.com/exploits/22931 https://www.exploit-db.com/exploits/18693 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/blazedvd_hdtv_bof.rb https://www.vulncheck.com/advisories/blazevideo-hdtv-player-pro-filename-handling-buffer-overflow https://access.redhat.com/security/cve/cve-2012-10031
Share on: