PT-2009-2866 · Vuplayer · Vuplayer

Skd · Publicado 2009-01-20 · Atualizado 2022-04-22 · CVE-2009-0182

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VUPlayer versions 2.49 and earlier

Description The issue allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file. This can be demonstrated by an http URL on a File1 line.

Recommendations For VUPlayer versions 2.49 and earlier, avoid using long URLs in .pls files until a fix is available. As a temporary workaround, consider restricting the use of .pls files or limiting the length of URLs in File lines to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2009-0182

Produtos afetados

Vuplayer

Referências · 7

• 🔥 https://exploit-db.com/exploits/50650 · Exploit
• 🔥 https://exploit-db.com/exploits/7695 · Exploit
• 🔥 http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html · Exploit
• 🔥 http://securityreason.com/securityalert/4923 · Exploit
• https://t.me/cvenotify/25190 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48170 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0182 · Nota de Segurança