critical9.3Public exploit code
CVE-2009-2934
Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PIPL 2.5.0 - '.m3u' Universal Buffer Overflow (SEH)2009-08-28 · local · windows · Verified
- pIPL 2.5.0 - '.PLS' / '.PL' Universal Local Buffer (SEH)2009-08-13 · local · windows · Verified
Impact
Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a (1) .pls or (2) .pl playlist file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Programmedintegration | Pipl | Versions 2.5.0, 2.5.0d |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/56996
- http://secunia.com/advisories/36297
- http://www.exploit-db.com/exploits/9428
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52440
- http://osvdb.org/56996
- http://secunia.com/advisories/36297
- http://www.exploit-db.com/exploits/9428
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52440