14 replies to this topic

[bLight]

Hi Everyone,

Work is still on-going for v8.6. We are a few weeks out till the final release, but it has come to our attention that there is a vulnerability in Zoom Player that can cause it to run code from within a JPEG file when trying to open a specially crafted JPEG file.

Rather than wait for the v8.6 to go final, we decided to issue a patch now and include a few easy to port features from the 8.6 code base.

Download Zoom Player MAX
Download Zoom Player PRO
Download Zoom Player FREE

Changes from v8.5.0:

  * New Smart Play profile for the FRAPS raw video capture format.

  * The ".TSP" file extension was missing under the 'video' section in
    file browsing interfaces.  You need to press the "Default" button in
    the options dialog (Adv. Options / File Format Association /
    File Extensions).

  - An exploit that could cause arbitrary code execution when loading
    a specially crafted JPEG file has been fixed.

    We would like to thank security researcher 'Debasish Mandal' for
    notifying us of the exploit.

  - The FREE version was not supposed to support Audio Visualizations,
    but a bug allowed you to enable support which resulted in a
    'list index out of bounds' error.

  - Audio files with ID3v2.4 tags encoded as UTF8 did not display TAG info.

  - The Audio Visualization feature did not work correctly with some Sonique
    visualization plugins.

  - The "DefaultSettings.exe" application was not able reset Zoom Player to
    it's default settings under some circumstances.

[magic144]

Hi...
does anybody know if the vulnerability affects the 8.6 beta(s)??

[boogafreak]

I suppose it does affect 8.6 versions so far, but not the 8.5.1 version above.

[zoeff50]

Hi,

Happy New Year everbody.
Purchased and installed Zoom Player. Saw the program at a friend and was impressed.
Installed the program on a Win7 x64 laptop and program works ok except following:
When you open the Control Bar and right click on it, a menu opens. When selecting Visible Buttons however nothing happens. Moving your mouse over the Visible Buttons, also nothing happens.
Checked with the friend who has a Win XP machine and it seems to work all ok. When you hover the mouse over the Visible Buttons, a sub-menu opens where you can select buttons to be visible on the Control Bar.
A bug in Zoom Player or something to do with Win 7 x64?

[boogafreak]

Hi and welcome,

Do you have any skins installed, or any special control bar option you may have used?

Booga.

[zoeff50]

Hi and welcome,

Do you have any skins installed, or any special control bar option you may have used?

Booga.

No, nothing special. Installed 'straight' out of the box. Purchased 1st the Pro version and installed. Next day upgraded to Home Max version because of Blue Ray support. Pro and MAX version same problem, Visible Buttons menu cannot be opened. Tried re-install but same.

zoeff50

[boogafreak]

I will try to find the cause of this..

[bLight]

1. Make sure the 'hide all buttons' setting isn't checked (enabled).
2. Try selecting the visible buttons from the options dialog.
3. Post a screenshot to better illustrate your meaning if this is not the case.

[zoeff50]

1. Make sure the 'hide all buttons' setting isn't checked (enabled).
2. Try selecting the visible buttons from the options dialog.
3. Post a screenshot to better illustrate your meaning if this is not the case.

Hello Zoom Player support,
Thank you, it works now.
Openen ZP and selected Options/ Setup > Interface > Ctrl bar > Buttons, and there you go.
Could have thought of it myself in trying the options menu.
Right clicking on the Ctrl bar and try to open Visible buttons still does not work, may be to be fixed in a future update.
rgds, Fred-H

[tvholic]

Premium version?

[boogafreak]

About Premium - We are changing!!!

You can install the MAX v8.5.1 version and then replace the EXE with the following one :
http://zoomplayer.co...51prm_patch.zip
From v8.6, your existing activation keys will be upgraded to MAX automatically.

Booga.

[ehathgepiurhe]

does anybody know if the vulnerability affects the 8.6 beta(s)??

Bit late here, but just for completeness - I believe that anything prior to 8.6 Beta 8 is vulnerable. Beta 8 and Beta 9 both include the vulnerability fix.

ehat

[zoeff50]

Zoom Player will not play wav audio files. Tried different settings in options but all negative.
Can someone advise?
Thanks,

Fred-H

[magic144]

Bit late here, but just for completeness - I believe that anything prior to 8.6 Beta 8 is vulnerable. Beta 8 and Beta 9 both include the vulnerability fix.
ehat

thanks ehat - bit late me seeing it too!! good to know

[ehathgepiurhe]

Zoom Player will not play wav audio files. Tried different settings in options but all negative.

Hi Fred-H,

Try these (in order):

1. Ensure everything in Install Center is installed, and is up to date. If you do need to install anything from Install Center, ensure Zoom is not running when you do.
2. Ensure your Audio Renderer is set correctly. For most people, this should be set to Default DirectSound Device. You can find the Audio Renderer in Zoom's options, in Advanced Options-->Playback-->Audio. This one is extremely unlikely to be the issue, as if it was wrong, you would not hear audio from any file, not just WAV's. I mention it purely because it is 3 seconds work to check, and I am a strong believer in checking the easy stuff first.
3. If you have made any major changes to your Smart Play profiles, back them up first. Then, open Zoom, navigate to Advanced Options-->Playback-->Smart Play and click the Auto-Configure button. After this, restart Zoom and see if the problem persists.
4. If you have made any major changes to your Zoom Player settings, back them up first. Then, ensure Zoom is not running, open the Windows Start Menu and navigate to All Programs-->Zoom Player-->Help-->Restore Default Settings. If you are on Vista/Seven with UAC enabled, acknowledge the UAC prompt. Then open Zoom and see if the problem persists.

If none of the above help, then you may need to provide some more details - is it only particular WAV files, or all WAV files? Are there any error messages involved? Can you provide a small sample file? etc. I suspect however that more than likely, #3 will solve the issue, and if it doesn't, than #4 is likely to.

thanks ehat - bit late me seeing it too!! good to know

No worries m!

ehat