Design/Logic Flaw

2009-03-2518:30:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.5%

JSON

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the (1) synacast, (2) Play, (3) pplsv, or (4) ppvod URI handler. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
pplivele1.9.21
ppliveeq1.9.15

CPE	Name	Operator	Version
	pplive	le	1.9.21
	pplive	eq	1.9.15

References

secunia.com/advisories/34327

www.vupen.com/english/advisories/2009/0739

exchange.xforce.ibmcloud.com/vulnerabilities/49263

www.exploit-db.com/exploits/8215