Lucene search

K
cve[email protected]CVE-2009-1356
HistoryApr 21, 2009 - 4:24 p.m.

CVE-2009-1356

2009-04-2116:24:52
CWE-119
web.nvd.nist.gov
29
cve-2009-1356
elecard avc hd player
buffer overflow
remote code execution
mp3
playlist
xpl
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.196 Low

EPSS

Percentile

96.3%

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file.

Affected configurations

NVD
Node
elecardelecard_avc_hd_player

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.196 Low

EPSS

Percentile

96.3%

Related for CVE-2009-1356