CVE-2009-2650

CVE-2009-2650 describes a heap-based buffer overflow in Sorcerer Software’s MultiMedia Jukebox 4.0 Build 020124. A crafted ".m3u" (and possibly ".pst") file can be delivered remotely to cause an application crash or, potentially, arbitrary code execution. Public sources confirm exploitation code ...