Zoom Player is "a media player for Windows which supports many formats through external filters". Zoom Player is affected by an unicode buffer-overflow in the function which builds the error messages. The problem can be exploited for example through a malformed ZPL file containing a http link to a file with PLS extension which will force the program to use wsprintf for building the "Unable to play [%s]" error message.
http://www.securiteam.com/windowsntf...B00L1FKKC.html
