Lucene search

MitreCVE-2009-3717

HistoryOct 16, 2009 - 4:30 p.m.

CVE-2009-3717

2009-10-1616:30:01

CWE-119

mitre

web.nvd.nist.gov

cve-2009-3717

lucvil patplayer 3.9

buffer overflow

denial of service

remote attack

arbitrary code execution

m3u file

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.098

Percentile

94.9%

JSON

Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URI in a playlist (.m3u) file.

Affected configurations

Nvd

Node

lucvilpatplayerMatch3.9

VendorProductVersionCPE
lucvilpatplayer3.9cpe:2.3:a:lucvil:patplayer:3.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lucvil	patplayer	3.9	cpe:2.3:a:lucvil:patplayer:3.9:::::::*

References

osvdb.org/55746

secunia.com/advisories/35756

www.exploit-db.com/exploits/9102

www.vupen.com/english/advisories/2009/1860

exchange.xforce.ibmcloud.com/vulnerabilities/51624

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.098

Percentile

94.9%

JSON

Related for CVE-2009-3717