Lucene search
HistoryNov 29, 2009 - 1:08 p.m.
CVE-2009-4097
cve-2009-4097
buffer overflow
serenity audio player
remote code execution
m3u file
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.109 Low
EPSS
Percentile
95.2%
Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote attackers to execute arbitrary code via a long URL in an M3U file. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
malsmithserenity_audio_playerRange≤3.2.3
ORmalsmithserenity_audio_playerMatch3.0.1
ORmalsmithserenity_audio_playerMatch3.0.2
ORmalsmithserenity_audio_playerMatch3.2.0
ORmalsmithserenity_audio_playerMatch3.2.1
ORmalsmithserenity_audio_playerMatch3.2.2
Related
openvas
openvas
Serenity/Mplay Audio Player Code Execution Vulnerability
2009-12-08 00:00:00
Serenity/Mplay Audio Player Code Execution Vulnerability
2009-12-08 00:00:00
prion
prion
Stack overflow
2009-11-29 13:08:00
cvelist
cvelist
CVE-2009-4097
2009-11-28 11:00:00
nvd
nvd
CVE-2009-4097
2009-11-29 13:08:29
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.109 Low
EPSS
Percentile
95.2%
Related for CVE-2009-4097