Lucene search

MitreCVE-2009-1437

HistoryApr 27, 2009 - 6:00 p.m.

CVE-2009-1437

2009-04-2718:00:00

CWE-119

mitre

web.nvd.nist.gov

cve-2009-1437

buffer overflow

portableapps

coolplayer

remote code execution

cve-2008-3408

m3u file

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.142

Percentile

95.7%

JSON

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.

Affected configurations

Nvd

Node

coolplayercoolplayerMatch2.19.1

VendorProductVersionCPE
coolplayercoolplayer2.19.1cpe:2.3:a:coolplayer:coolplayer:2.19.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
coolplayer	coolplayer	2.19.1	cpe:2.3:a:coolplayer:coolplayer:2.19.1:::::::*

References

osvdb.org/53885

secunia.com/advisories/34816

exchange.xforce.ibmcloud.com/vulnerabilities/49984

hansesecure.de/vulnerability-in-coolplayer/

www.exploit-db.com/exploits/8489

www.exploit-db.com/exploits/8519

www.exploit-db.com/exploits/8520

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.142

Percentile

95.7%

JSON

Related for CVE-2009-1437