VCDQuality Forums (http://www.vcdhq.com/forum/index.php)
- Computer and Audio/Video help (http://www.vcdhq.com/forum/forumdisplay.php?forumid=56)
-- K-Lite Codec Pack ffdshow URL Processing vulnerability (http://www.vcdhq.com/forum/showthread.php?threadid=83275)

K-Lite Codec Pack ffdshow URL Processing vulnerability

quote:

---

K-Lite Codec Pack ffdshow URL Processing Buffer Overflow

SECUNIA ADVISORY ID:
SA32881

VERIFY ADVISORY:
http://secunia.com/advisories/32881/

CRITICAL:
Highly critical

IMPACT:
DoS, System access

WHERE:
From remote

SOFTWARE:
K-Lite Codec Pack 4.x
http://secunia.com/advisories/product/20591/

DESCRIPTION:
A vulnerability has been reported in K-Lite Codec Pack, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the inclusion of a vulnerable ffdshow version.

For more information:
SA32846

The vulnerability is reported in versions prior to 4.3.4.

SOLUTION:
Update to version 4.3.4.

PROVIDED AND/OR DISCOVERED BY:
Nguyen Anh Tai, reported via SVRT-Bkis

ORIGINAL ADVISORY:
K-Lite Codec Pack:
http://www.codecguide.com/changelogs_standard.htm

---