CVE-2009-3717

CVE-2009-3717 affects LucVil PatPlayer 3.9 via a heap-based buffer overflow. A long URI in a playlist (.m3u) can cause a denial of service (crash) or allow remote code execution. For this entry, no further remediation details are provided in the supplied documents.

PatPlayer 3.9 Heap Overflow

!/usr/bin/perl PatPlayer v3.9 M3U File Local Heap Overflow PoC Found By : Cyber-Zone ABDELKHALEK Greatz : All friends Jiko : Sec-r1z.CoM ..... IQ-TY .... EAX 41414141 ECX 00000000 EDX 004F1FC0 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" EBX 00B928DC ESP 0012FD2C EBP 0012FD78 ESI 004F1C...