critical9.3Public exploit code
CVE-2009-2550
Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hamster Audio Player 0.3a - Universal Buffer Overflow (SEH)2009-07-16 · local · windows · Verified
- Hamster Audio Player 0.3a - Local Buffer Overflow (PoC)2009-07-15 · dos · windows · Verified
Impact
Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ondanera | Hamster Audio Player | Version 0.3a |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/55871
- http://secunia.com/advisories/35825
- http://www.exploit-db.com/exploits/9157
- http://www.exploit-db.com/exploits/9172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51732
- http://osvdb.org/55871
- http://secunia.com/advisories/35825
- http://www.exploit-db.com/exploits/9157
- http://www.exploit-db.com/exploits/9172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51732