Lucene search

K
cve[email protected]CVE-2009-0450
HistoryFeb 10, 2009 - 7:00 a.m.

CVE-2009-0450

2009-02-1007:00:23
CWE-119
web.nvd.nist.gov
20
cve-2009-0450
buffer overflow
blazevideo hdtv player
security vulnerability
remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.136 Low

EPSS

Percentile

95.7%

Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .plf) file.

Affected configurations

NVD
Node
blazevideohdtv_playerRange3.5
OR
blazevideohdtv_playerMatch2.1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.136 Low

EPSS

Percentile

95.7%