securfrog has discovered a vulnerability in Nero Media Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when loading .M3U or .PLS playlist files and can be exploited to cause a heap-based buffer overflow by e.g. loading a .M3U playlist file containing an overly long URI string.

For more information:
SA26800

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 1.4.0.35. Other versions may also be affected.

Solution
Do not open untrusted .M3U or .PLS files.

Provided and/or discovered by
securfrog

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.milw0rm.com/exploits/5063

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers