CVE-2008-5735

Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a…

published December 26, 2008

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

⚠️ A simple skin file could put your system at risk! A stack-based buffer overflow in CoolPlayer's skin.c means that a remote attacker can send a large PlaylistSkin value and execute arbitrary code. 🔥 It's like ordering a pizza that's way too big for your oven; when you try to shove it in, it overflows and messes everything up in the kitchen! If exploited, an attacker could take control of your system, running malicious code as if they were you. This could lead to data breaches, system instability, or even total compromise of your files!

Put simply

It's like ordering a pizza that's way too big for your oven; when you try to shove it in, it overflows and messes everything up in the kitchen! This vulnerability arises from a stack-based buffer overflow in the skin.c file of CoolPlayer versions 2.17 through 2.19. By sending a specially crafted PlaylistSkin value, an attacker can overwrite stack memory and execute arbitrary code.

What to do

If exploited, an attacker could take control of your system, running malicious code as if they were you. This could lead to data breaches, system instability, or even total compromise of your files! To protect your system, immediately update CoolPlayer to the latest version. If you’re using an affected version, consider disabling the skin loading feature until a safe upgrade is performed. Always validate inputs to prevent such vulnerabilities! You've got this! Follow these steps and your system will be secure in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07386 · 94.4th percentile
Published
2008-12-26T18:00Z
EPSS history
Timeline
  • 26 DEC 18:00Z
    Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a…
    cvelistv5