Lucene search

K
cve[email protected]CVE-2009-3221
HistorySep 16, 2009 - 7:30 p.m.

CVE-2009-3221

2009-09-1619:30:00
CWE-119
web.nvd.nist.gov
17
cve-2009-3221
buffer overflow
audio lib player
alp
remote code execution
url
m3u
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.164 Low

EPSS

Percentile

96.0%

Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file.

Affected configurations

NVD
Node
basicunivers.free.fraudio_lib_player

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.164 Low

EPSS

Percentile

96.0%

Related for CVE-2009-3221