CVE-2009-2485

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• HT-MP3Player 1.0 - '.HT3' File Parsing Buffer Overflow (Metasploit)2010-04-30 · local · windows · Verified
• HT-MP3Player 1.0 - '.ht3' Universal Buffer Overflow (SEH)2009-06-29 · local · windows · Verified
• HT-MP3Player 1.0 - '.ht3' Local Buffer Overflow (SEH)2009-06-29 · local · windows · Verified

Impact

Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.exploit-db.com/exploits/9034
• http://www.exploit-db.com/exploits/9034