$ cve CVE-2006-6199 JSON

CVE-2006-6199 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 65.3% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	65.28% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2006-12-01
Last modified	2026-06-16

Affected (1)

Vendor	Product
blazevideo	blaze dvd

Public exploits

Source	Title	Date
exploit-db	BlazeDVD 6.2 - '.plf' Local Buffer Overflow (SEH)	2013-10-28
exploit-db	BlazeDVD Pro Player 6.1 - Direct RET Local Stack Buffer Overflow	2013-07-16
exploit-db	BlazeDVD 6.1 - '.PLF' File (ASLR + DEP Bypass) (Metasploit)	2012-12-31
exploit-db	BlazeDVD 5.1 - PLF Buffer Overflow (Metasploit)	2010-11-11
exploit-db	BlazeDVD 5.1 (Windows 7) - '.plf' File Stack Buffer Overflow (ASLR + DEP Bypass)	2010-06-17
exploit-db	BlazeDVD 5.1/HDTV Player 6.0 - '.plf' Universal Buffer Overflow (SEH)	2009-08-04
exploit-db	BlazeDVD 5.1 Professional - '.plf' Local Buffer Overflow (SEH)	2009-08-03
exploit-db	BlazeDVD 5.0 - '.PLF' Playlist File Remote Buffer Overflow	2008-08-10
exploit-db	BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow	2006-12-01

References

→ the Explorer · watch your stack · NVD