• info
• discussion
• exploit
• solution
• references

QQ Player 'PnSize' Value Buffer Overflow Vulnerability

QQ Player is prone to a buffer-overflow vulnerability because of a failure to properly bounds check user-supplied data.

Successful exploits may allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

QQ Player 3.2 is vulnerable; other versions may also be affected.