critical9.3Public exploit code
CVE-2009-2617
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BaoFeng Storm 3.9.62 - '.Playlist' File Buffer Overflow (PoC)2009-05-28 · dos · windows · Verified
Impact
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Baofeng | Storm | Version 3.9.62 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=124624413120440&w=2
- http://marc.info/?l=full-disclosure&m=124627617220913&w=2
- http://secunia.com/advisories/35592
- http://www.securityfocus.com/bid/35512
- http://marc.info/?l=full-disclosure&m=124624413120440&w=2
- http://marc.info/?l=full-disclosure&m=124627617220913&w=2
- http://secunia.com/advisories/35592
- http://www.securityfocus.com/bid/35512