critical9.3Public exploit code
CVE-2009-0450
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BlazeDVD 5.1/HDTV Player 6.0 - '.plf' Universal Buffer Overflow (SEH)2009-08-04 · local · windows · Verified
- BlazeVideo HDTV Player 3.5 - '.PLF' Playlist File Local Overflow2009-02-04 · local · windows · Verified
- BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow2006-12-01 · local · windows · Verified
- BlazeVideo HDTV Player 6.6 Professional - Universal ASLR + DEP Bypass2011-10-07 · local · windows
Impact
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .plf) file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blazevideo | Hdtv Player | through 3.5 Version 2.1 |