Lucene search

K
cve[email protected]CVE-2009-1627
HistoryMay 12, 2009 - 4:30 p.m.

CVE-2009-1627

2009-05-1216:30:00
CWE-119
web.nvd.nist.gov
22
cve-2009-1627
sdp downloader
buffer overflow
remote code execution
security vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.166 Low

EPSS

Percentile

96.1%

Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file.

Affected configurations

NVD
Node
sdp_multimediastreaming_download_projectMatch2.3.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.166 Low

EPSS

Percentile

96.1%

Related for CVE-2009-1627