CVE-2009-2362

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• AudioPLUS 2.00.215 - '.m3u' / '.lst' Universal Overwrite (SEH)2009-07-15 · local · windows · Verified
• AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)2009-07-01 · local · windows · Verified
• AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)2009-07-01 · local · windows · Verified

Impact

Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long string in a (1) .lst or (2) .m3u playlist file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/55528
• http://packetstormsecurity.org/0907-exploits/audioplus-overflow.txt
• http://secunia.com/advisories/35673
• http://www.exploit-db.com/exploits/9064
• http://www.vupen.com/english/advisories/2009/1764
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51484
• http://osvdb.org/55528
• http://packetstormsecurity.org/0907-exploits/audioplus-overflow.txt
• http://secunia.com/advisories/35673
• http://www.exploit-db.com/exploits/9064
• http://www.vupen.com/english/advisories/2009/1764
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51484