cbcvebase.
CVE-2011-4496
published 2011-11-21

CVE-2011-4496: Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka playlist) file.

PriorityP350critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
10.76%
95.3th percentile
Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka playlist) file.

Affected

1 ranges
VendorProductVersion rangeFixed in
aviosoftdtv_player——

Detection & IOCsextracted from sources · hover to see the quote

filename.plf↗
urlhttps://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/aviosoft_plf_buf.rb↗
  • →Monitor for stack buffer overflow triggered when Aviosoft DTV Player processes a .plf playlist file with oversized content copied onto the stack. ↗
  • →Flag opening of crafted .plf (playlist) files in Aviosoft Digital TV Player Pro version 1.x as a potential exploitation attempt. ↗
  • ·Exploit targets Aviosoft Digital TV Player Pro version 1.x specifically; versions outside this range may not be affected. ↗
  • ·Code execution occurs under the context of the logged-in user, so impact is limited by user privilege level. ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.