Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.Referenceshttps://www.exploit-db.com/exploits/7695https://exchange.xforce.ibmcloud.com/vulnerabilities/48170http://securityreason.com/securityalert/4923http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html