CVE-2009-4964

CVE-2009-4964 describes a stack-based buffer overflow in KSP 2006 FINAL that allows remote code execution via a long string in a .M3U playlist file. The vulnerability is triggered by crafted playlist data, with a CVSS v2 base score of 9.3 (HIGH) indicating NETWORK attack vector, no authentication...

CVE-2009-3670

CVE-2009-3670 affects KSP Sound Player 2009 R2 and R2.1. It is a stack-based buffer overflow triggered by a long string in an .m3u playlist, allowing a remote attacker to execute arbitrary code. The vulnerability appears in the way the playlist string is handled (no details on mitigations or patc...