AlpHaNiX has discovered a vulnerability in Elecard AVC HD Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when processing playlist files and can be exploited to cause a stack-based buffer overflow via e.g. a specially crafted .M3U file.

Successful exploitation allows execution of arbitrary code.

This is related to:
SA33355

The vulnerability is confirmed in version 5.5.90116. Other versions may also be affected.

Solution
Update to version 5.8 build 36317.121003.

Provided and/or discovered by
AlpHaNiX

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.exploit-db.com/exploits/7942/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers