Serenity · Serenity Audio Player · CVE-2009-4097
**Name of the Vulnerable Software and Affected Versions**
Serenity Audio Player versions 3.2.3 and earlier
**Description**
The issue is related to a stack-based buffer overflow in the `MplayInputFile` function. This allows remote attackers to execute arbitrary code via a long URL in an M3U file.
**Recommendations**
For versions 3.2.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.