Security issue BS.Player Free?

[Niiub]

Hej Guys i wrote some days a email to the support but got no response.
I made a security audit of the BS.Player Free, and found a possebility to take controll of the Process if someone start a manipullated XYZ file with the Player.
Let's look at some Screenshot: [removed]

you see the loaded BS.Player in a debugger and you see the overwritten XYZXYZ it means we can take controlle of the Process and let execute some evil code.

I don't know if the Pro version is alsow affected, but i think so. It have to be fixed bevor some people try to use this bug and attack the customers. If the developers are interested in the manipullated file and more Information please Contact me.

Thanks,
Niiub

Edit//

Thanks BSPeter hope they can fix the security issues. :) For Help contact me by email or PM :)

[BSPeter]

I copied full contents of your post to a non-public area of the forum and will ask a BS.Player team member's attention to it.

[I edited a part of your post; but only here, not in the copy.]

[Ico-man]

Thank you for reporting. Will be fixed in next version.