Lucene search

MitreCVE-2009-3537

HistoryOct 02, 2009 - 7:30 p.m.

CVE-2009-3537

2009-10-0219:30:00

CWE-119

mitre

web.nvd.nist.gov

epicdjsoftware

epicdj

cve-2009-3537

buffer overflow

denial of service

remote attack

code execution

.m3u

.mpl

playlist file

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.023

Percentile

89.8%

JSON

Multiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a (1) .m3u or (2) .mpl playlist file.

Affected configurations

Nvd

Node

epicdjsoftwareepicdjMatch1.3.9.1

VendorProductVersionCPE
epicdjsoftwareepicdj1.3.9.1cpe:2.3:a:epicdjsoftware:epicdj:1.3.9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
epicdjsoftware	epicdj	1.3.9.1	cpe:2.3:a:epicdjsoftware:epicdj:1.3.9.1:::::::*

References

secunia.com/advisories/35878

www.exploit-db.com/exploits/9201

www.vupen.com/english/advisories/2009/1956

exchange.xforce.ibmcloud.com/vulnerabilities/51825

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.023

Percentile

89.8%

JSON

Related for CVE-2009-3537