Multiple vulnerabilities have been discovered in Subtitle Translation Wizard, which can be exploited by malicious people to compromise a user's system.

1) A boundary error when processing subtitles text in st-wizard.exe can be exploited to cause a stack-based buffer overflow via an overly long string in a SRT file.

2) A boundary error when processing subtitles text in psubtitle.exe can be exploited to cause a stack-based buffer overflow via an overly long string in a SRT file.

3) A boundary error when processing SAMI subtitle files in st-wizard.exe can be exploited to cause a stack-based buffer overflow via an overly long string inside the "<SYNC>" tags.

4) A boundary error when processing SubViewer subtitle files in st-wizard.exe can be exploited to cause a stack-based buffer overflow via an overly long string in a SUB file.

Successful exploitation of these vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are confirmed in version 3.0.0 Other versions may also be affected.

Solution
Upgrade to version 4.0.0.

Provided and/or discovered by
1) Blake
2-4) Secunia Research

Changelog
Further details available to Secunia VIM customers

Original Advisory
Blake:
http://www.exploit-db.com/exploits/13965/

Secunia Research:
http://secunia.com/secunia_research/2010-126/

Deep Links
Links available to Secunia VIM customers