CVE-2009-2362

EPSS 7.2%

Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long string in a (1) .lst or (2) .m3u playlist file.

Affected products

n/a · n/a

public PoCs found — 5

cve_referencepacketstormsecurity.org/0907-exploits/audioplus-overflow.txtunverified cve_referencewww.exploit-db.com/exploits/9064unverified exploitdbwww.exploit-db.com/exploits/9064unverified exploitdbwww.exploit-db.com/exploits/9152unverified exploitdbwww.exploit-db.com/exploits/9070unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/55528 http://packetstormsecurity.org/0907-exploits/audioplus-overflow.txt http://secunia.com/advisories/35673 https://exchange.xforce.ibmcloud.com/vulnerabilities/51484 http://www.exploit-db.com/exploits/9064 http://www.vupen.com/english/advisories/2009/1764