Lucene search
HistorySep 18, 2009 - 8:30 p.m.
CVE-2009-3254
cve-2009-3254
buffer overflow
remote code execution
ultimate player
playlist
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.178 Low
EPSS
Percentile
96.2%
Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .upl playlist file.
Affected configurations
Node
ultimatevideositeultimate_playerMatch1.56beta
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimatevideosite:ultimate_player | ultimatevideosite ultimate player | eq | 1.56 |
Related
prion
prion
Stack overflow
2009-09-18 20:30:00
cvelist
cvelist
CVE-2009-3254
2009-09-18 20:00:00
nvd
nvd
CVE-2009-3254
2009-09-18 20:30:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.178 Low
EPSS
Percentile
96.2%
Related for CVE-2009-3254