critical9.3Public exploit code
CVE-2009-3428
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (3)2009-08-12 · local · windows · Verified
- Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (2)2009-08-11 · local · windows · Verified
- Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (1)2009-08-11 · local · windows · Verified
Impact
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otbcode | Easy Music Player | Version 1.0.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/36267
- http://www.exploit-db.com/exploits/9412
- http://www.exploit-db.com/exploits/9418
- http://www.exploit-db.com/exploits/9420
- http://secunia.com/advisories/36267
- http://www.exploit-db.com/exploits/9412
- http://www.exploit-db.com/exploits/9418
- http://www.exploit-db.com/exploits/9420