PT-2010-1566 · Brothersoft · Brothersoft Ew-Musicplayer

Sirgod · Published 2010-03-29 · Updated 2017-09-19 · CVE-2009-4757

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BrotherSoft EW-MusicPlayer version 0.8

Description The issue is a stack-based buffer overflow that can be triggered by a remote attacker sending a long string in a malformed playlist (.m3u) file. This can cause a denial of service, resulting in an application crash, or potentially allow the execution of arbitrary code.

Recommendations For BrotherSoft EW-MusicPlayer version 0.8, consider avoiding the use of malformed playlist files until a patch is available. As a temporary workaround, restrict the processing of long strings in .m3u files to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4757

Affected Products

Brothersoft Ew-Musicplayer

References · 4

• 🔥 http://securityfocus.com/bid/34806 · Exploit
• 🔥 https://exploit-db.com/exploits/8601 · Exploit
• 🔥 http://exploit-db.com/exploits/8601 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4757 · Security Note