CVE-2009-2650

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)2009-12-27 · local · windows · Verified
• Media Jukebox 8 - '.pls' Universal Local Buffer (SEH)2009-08-31 · local · windows · Verified
• MultiMedia Jukebox 4.0 Build 020124 - '.pst' / '.m3u' Heap Overflow (PoC)2009-07-16 · dos · windows · Verified

Impact

Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/35860
• http://www.exploit-db.com/exploits/9173
• http://secunia.com/advisories/35860
• http://www.exploit-db.com/exploits/9173