ProShow Gold allows you easily create photo and video slide shows on DVD, PC and Web. Vvulnerabilities in the software related to the processing of ProShow Slideshow s project files ( .psh ). This vulnerability permits hackers to execute malicious code on users systems.
Vulnerable Systems:
* ProShow Gold version 4.0.2549
PSH is the extension of an ProShow Slideshow s project file. There are many bugs found in the way ProShow Gold processing a PSH file with overly long fields. Inadequate check for two fields including cell[n].images[m].image and cell[n].sound.file fields (where m, n is an integer number) could lead to critical buffer overflow errors.
In order to exploit, a hacker might create a specially crafted .PSH file and trick users into using it. If successful, hackers can perform local attack, inject viruses, steal sensitive information and even take control of the victim's system.
Disclosure Timeline:
08/06/2009 vendor notification
08/20/2009 release date
-------------------------------------------------------------------------------------------------------------------------------
Find out more about website security scanning.
+
