PT-2009-5827 · Epicdjsoftware · Epicvj

Hack4Love · Publicado 2009-10-02 · Atualizado 2017-09-19 · CVE-2009-3536

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EpicDJSoftware EpicVJ versions 1.2.8.0 through 1.3.1.2

Description The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers. This can be achieved by sending a long string in a .m3u or .mpl playlist file, potentially causing a denial of service (application crash) or possibly allowing the execution of arbitrary code.

Recommendations For EpicDJSoftware EpicVJ versions 1.2.8.0 through 1.3.1.2, consider restricting the use of .m3u and .mpl playlist files until a patch is available. As a temporary workaround, avoid using long strings in .m3u or .mpl playlist files to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-3536

Produtos afetados

Epicvj

Referências · 6

• 🔥 https://exploit-db.com/exploits/9200 · Exploit
• 🔥 http://exploit-db.com/exploits/9200 · Exploit
• http://vupen.com/english/advisories/2009/1955 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51826 · Nota
• http://secunia.com/advisories/35869 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3536 · Nota de Segurança