[AOGBF] Re: BS.Player 2.22 NULL ptr dereference

Dear edi.strosar_at_varnostne-novice.com,

<irony>

 Seems to be Another One George Bush Fan.

You know, there is vulnerability in all media players, it can be
exploited by opening MP3 file with George Bush bathroom singing. George
Bush fans are not vulnerable, yet they are still vulnerable to one you
described.

</irony>

Quote:

 Can you, please explain why is this security bug? DoS is not software
 crash, DoS is Denial of Service. It means, security impact of DoS
 vulnerability should be preventing (blocking) access of legitimate user
 to some data or service (via data corruption, service malfuction, etc).

--Friday, August 3, 2007, 4:40:41 AM, you wrote to full-disclosure_at_lists.grok.org.uk:

esvnc>
=========================================================================
esvnc> Team Intell Security Advisory TISA2007-10-Private
esvnc>
-------------------------------------------------------------------------
esvnc> BS.Player 2.22 NULL pointer dereference
esvnc>
=========================================================================

-- 
~/ZARAZA http://securityvulns.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/