bsplayer 2.41.1003 reported as insecure by secunia

[tevare]

bsplayer 2.41.1003 reported as insecure by secuni psi.
both pro/free version
dont know if its a false positiv or for real
hope some can confirm


this is what the secunia psi points to
BS.Player Playlist Processing Buffer Overflow Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com

[adicoto]

I don't see a word about build 1003 in there. As a matter of fact, they made a recomandation:

Solution:
Update to version 2.36 Build 990.


And that was 3 months ago.

Tested and working against:

...
v2.32 Build 975 Free
v2.34 Build 980 PRO
win xp pro sp2 / sp3
win 2k3 sp1

not vulnerable:
v2.35 Build 985 PRO
V2.36 Build 990 Free/Pro

[tevare]

yes but now it doesnt even report 2.36 build 990 as secure, tested to install that so think its a bit out of date
maybe a false warning

[adicoto]

Downloaded theyr software and did a scan. 3 programs with security problems. Apple Bonjour for Windows, BSPlayer free ????? (don't have such thing), and WinRAR.
I don't see any info on the forum about BSPlayer, but I find there Chrome, Adobe Acrobat, Powerpoint.....so, I'm fine with this result.
Uninstalling.