CVE-2009-0476
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
50Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 37%
da publicação à arma228 dias
Publicada no NVD8 de fev.
1ª PoC+228d
metasploit+303d
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for Euphonics Audio Player 1.0. NOTE: some of these details are obtained from third party information.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 7✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16626exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/11079cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/7974exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/10353exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/15013cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/7958cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/7973⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://secunia.com/advisories/33791http://secunia.com/advisories/33817https://www.exploit-db.com/exploits/7958https://www.exploit-db.com/exploits/7973https://www.exploit-db.com/exploits/7974http://www.securityfocus.com/archive/1/500652/100/0/threadedhttp://www.securityfocus.com/bid/33589http://www.vupen.com/english/advisories/2009/0316