Secunia

Some vulnerabilities have been discovered in PPLive, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to the application registering the "synacast:", "Play:", and "ppvod:" URI handlers in an improper way. This can be exploited to inject arbitrary command line arguments when "PPLive.exe" is invoked.

Successful exploitation allows e.g. executing arbitrary code via a malicious .dll file loaded from a shared directory via the "/LoadModule" command line switch when a user visits a specially crafted web page.

The vulnerabilities are confirmed in version 1.9.15 and reported in 1.9.21. Other versions may also be affected.

Solution
Do not visit untrusted web sites.

Provided and/or discovered by
strawdog

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/8215

Deep Links
Links available in Customer Area