critical9.3Public exploit code
CVE-2009-3670
Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KSP 2009R2 - '.m3u' Universal Local Buffer Overflow (SEH)2009-09-10 · local · windows · Verified
Impact
Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ksplayer | Ksp Sound Player | Version 2009 |