PT-2009-5568

CVE-2009-3254

·

Published

2009-09-18

·

Updated

2017-09-19

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Ultimate Player version 1.56 beta
Description The issue concerns multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved by providing a long string in either a .m3u or .upl playlist file.
Recommendations For Ultimate Player version 1.56 beta, update to a version that fixes the buffer overflow issues to prevent remote code execution.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2009-3254
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com