Lucene search

K
cve[email protected]CVE-2009-3969
HistoryNov 18, 2009 - 11:30 p.m.

CVE-2009-3969

2009-11-1823:30:00
CWE-119
web.nvd.nist.gov
23
cve-2009-3969
faslo player 7.0
buffer overflow
denial of service
remote attackers
arbitrary code
.m3u playlist
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file.

Affected configurations

NVD
Node
faslofaslo_playerMatch7.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

Related for CVE-2009-3969