Secunia Research has discovered a vulnerability in BearShare, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a boundary error in the NCTAudioFile2.AudioFile ActiveX control when handling the “SetFormatLikeSample()” method. This can be exploited to cause a stack-based buffer overflow by passing an overly long string (about 4124 bytes) as argument to the affected method. BearShare version 6.0.2.26789 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56650/secunia-bearshare.txt
Source: https://packetstormsecurity.com/files/56650/secunia-bearshare.txt.html