high8.8Public exploit code
CVE-2009-0182
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VUPlayer 2.49 - '.pls' Universal Buffer Overflow2009-01-07 · local · windows · Verified
- VUPlayer 2.49 - '.wax' Local Buffer Overflow (DEP Bypass)2022-01-10 · local · windows
Impact
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vuplayer | Vuplayer | through 2.49 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html
- http://securityreason.com/securityalert/4923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48170
- https://www.exploit-db.com/exploits/7695
- http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html
- http://securityreason.com/securityalert/4923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48170
- https://www.exploit-db.com/exploits/7695