PT-2009-3477 · Unknown · Media Commands

Hakxer · Published 2009-03-12 · Updated 2017-09-29 · CVE-2009-0885

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Media Commands version 1.0

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a long string in certain playlist files, including M3U, M3l, TXT, and LRC files.

Recommendations For Media Commands version 1.0, consider restricting the processing of long strings in playlist files to prevent exploitation until a fix is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-0885

Affected Products

Media Commands

References · 11

• 🔥 https://exploit-db.com/exploits/8135 · Exploit
• 🔥 https://exploit-db.com/exploits/8137 · Exploit
• http://secunia.com/advisories/34122 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0885 · Security Note
• http://vupen.com/english/advisories/2009/0583 · Vendor Advisory
• http://osvdb.org/52346 · Note
• http://securityfocus.com/bid/33958 · Note
• http://securityfocus.com/data/vulnerabilities/exploits/33958.rb · Note
• http://securityfocus.com/data/vulnerabilities/exploits/33958.py · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49035 · Note
• http://securityfocus.com/data/vulnerabilities/exploits/33958-2.py · Note