Parvez Anwar has discovered a vulnerability in GOM Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when parsing a URL within playlist files. This can be exploited to cause a stack-based buffer overflow via a specially crafted e.g. PLS or ASX playlist file.

Successful exploitation allows execution of arbitrary code, but requires tricking a user into opening a malicious file.

The vulnerability is confirmed in version 2.0.12.3375. Other versions may also be affected.

Solution
Update to version 2.1.1.3399 or 2.1.6.3499.

Provided and/or discovered by
Parvez Anwar

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.exploit-db.com/exploits/7929

Deep Links
Links available to Secunia VIM customers