critical9.3Public exploit code
CVE-2009-3214
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh)…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ProShow Gold 4.0.2549 - '.psh' Local Stack Buffer Overflow (Metasploit)2010-09-25 · local · windows · Verified
- ProShow Producer / Gold 4.0.2549 - '.psh' Universal Buffer Overflow (SEH)2009-08-25 · local · windows · Verified
- Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)2009-08-24 · local · windows · Verified
Impact
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Photodex | Proshow Gold | Version 4.0.2549 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.bkis.com/?p=737
- http://osvdb.org/57226
- http://secunia.com/advisories/36357
- http://www.securityfocus.com/archive/1/505957/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52606
- http://blog.bkis.com/?p=737
- http://osvdb.org/57226
- http://secunia.com/advisories/36357
- http://www.securityfocus.com/archive/1/505957/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52606