← back
CVE-2009-3812

CVE-2009-3812

EPSS 6.9%
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.0, and Free version 1.77.001 allows remote attackers to execute arbitrary code via a long playlist in an Ots File List (.ofl) file.
Affected products
n/a · n/a
public PoCs found — 4
cve_referencepacketstormsecurity.org/0907-exploits/otsav-overflow.txtunverifiedcve_referencewww.exploit-db.com/exploits/9113unverifiedexploitdbwww.exploit-db.com/exploits/9090unverifiedexploitdbwww.exploit-db.com/exploits/9113unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/55747http://packetstormsecurity.org/0907-exploits/otsav-overflow.txthttp://secunia.com/advisories/35738https://exchange.xforce.ibmcloud.com/vulnerabilities/51628http://www.exploit-db.com/exploits/9113http://www.vupen.com/english/advisories/2009/1861