PT-2009-5828 · Epicdjsoftware · Epicdj

Publicado 2009-10-02 · Atualizado 2017-09-19 · CVE-2009-3537

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EpicDJSoftware EpicDJ version 1.3.9.1

Description The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers. This can happen when a long string is present in either a .m3u or .mpl playlist file. As a result, attackers can cause a denial of service, leading to an application crash, or potentially execute arbitrary code.

Recommendations For EpicDJSoftware EpicDJ version 1.3.9.1, avoid using long strings in .m3u or .mpl playlist files to minimize the risk of exploitation. Consider restricting the use of these file types until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-3537

Produtos afetados

Epicdj

Referências · 5

• 🔥 http://exploit-db.com/exploits/9201 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3537 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51825 · Nota
• http://secunia.com/advisories/35878 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1956 · Aviso do Fabricante