critical9.3Public exploit code
CVE-2009-3254
Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .upl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ultimate Player 1.56b - '.m3u' / '.upl' Universal Local Buffer Overflow (SEH)2009-08-31 · local · windows · Verified
Impact
Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .upl playlist file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ultimatevideosite | Ultimate Player | Version 1.56 |