critical9.3Public exploit code
CVE-2009-1437
Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (2)2009-04-22 · local · windows · Verified
- CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (1)2009-04-22 · local · windows · Verified
- CoolPlayer Portable 2.19.1 - '.m3u' Local Stack Overflow (PoC)2009-04-20 · dos · windows · Verified
Impact
Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coolplayer | Coolplayer | Version 2.19.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/53885
- http://secunia.com/advisories/34816
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49984
- https://hansesecure.de/vulnerability-in-coolplayer/
- https://www.exploit-db.com/exploits/8489
- https://www.exploit-db.com/exploits/8519
- https://www.exploit-db.com/exploits/8520
- http://osvdb.org/53885
- http://secunia.com/advisories/34816
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49984
- https://hansesecure.de/vulnerability-in-coolplayer/
- https://www.exploit-db.com/exploits/8489
- https://www.exploit-db.com/exploits/8519
- https://www.exploit-db.com/exploits/8520