critical9.3Public exploit code
CVE-2009-3221
Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Audio Lib Player - '.m3u' Local Buffer Overflow (SEH)2009-09-09 · local · windows · Verified
Impact
Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basicunivers.Free.Fr | Audio Lib Player | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0907-exploits/alp-overflow.txt
- http://secunia.com/advisories/35867
- http://www.osvdb.org/56047
- http://www.vupen.com/english/advisories/2009/1963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51873
- http://packetstormsecurity.org/0907-exploits/alp-overflow.txt
- http://secunia.com/advisories/35867
- http://www.osvdb.org/56047
- http://www.vupen.com/english/advisories/2009/1963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51873