Check Point Advisories

CoolPlayer Playlist File Handling Buffer Overflow (CVE-2008-3408)

Check Point Reference: CPAI-2008-324
Date Published: 22 Aug 2010
Severity: Medium
Last Updated: Sunday 05 April, 2015
Source:
Industry Reference:CVE-2008-3408
Protection Provided by:

Security Gateway
R81, R80, R77, R75
Who is Vulnerable?
Vulnerability Description CoolPlayer is media player application capable of playing back numerous multimedia file formats. The application also handles handles playlist files such as M3U (.m3u). There exists a buffer overflow vulnerability in the CoolPlayer. The vulnerability is due to a boundary error within the handling
of playlist files. A remote attacker can exploit this vulnerability to create a buffer overflow condition in the target application. Successful exploitation could lead to arbitrary code execution with the privileges of the currently logged in user. In an attack case where code injection is not successful, the CoolPlayer process will terminate. In an attack scenario where arbitrary code is attempted to be injected and executed on the target machine, the behavior of the target host is dependent on the intention of the malicious code. Any code injected into the vulnerable program would execute in the security context of the currently logged in user.

Protection Overview

This protection will detect and block attempts to exploit this vulnerability.

In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.

Security Gateway R80 / R77 / R75

  1. In the IPS tab, click Protections and find the CoolPlayer Playlist File Handling Buffer Overflow protection using the Search tool and Edit the protection's settings.
  2. Install policy on all Security Gateways.

This protection's log will contain the following information:

Attack Name:  Content Protection Violation.
Attack Information:  CoolPlayer Playlist file handling buffer overflow

×
  Feedback
This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
OK