QQplayer Memory resume uption Vulnerability (including repair)

Affected Versions:
<= QQplayer 2.8

Vulnerability description:
A symbolic extension problem occurs in MP4Splitter. dll.

. Text: 10023EFF mov eax, [esi]
. Text: 10023F01 push 0
. Text: 10023F03 push 20 h
. Text: 10023F05 lea ecx, [esp + 40 h + buff]
. Text: 10023F09 push ecx
. Text: 10023F0A mov edx, [eax + 0Ch]
. Text: 10023F0D mov ecx, esi
. Text: 10023F0F call edx; get data from the file.
. Text: 10023F11 movsx eax, [esp + 38 h + buff]; symbol extension produces a value similar to 0xFFFFFFFX.
. Text: 10023F16 cmp eax, 20 h
. Text: 10023F19 jge short loc_10023F2E; check to be bypassed
. Text: 10023F1B mov [esp + eax + 38 h + buf], 0; malicious data is used for pointer operations, causing corruption of pointer data in the stack.
. Text: 10023F20 lea eax, [esp + 38 h + buf]
. Text: 10023F24 push eax
. Text: 10023F25 lea ecx, [edi + 5Ch]

<* Reference
Http://www.softrce.net/archives/369
*>

Vendor patch:

QQplayer
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage.