CVE-2009-0174

Sažetak

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.

Reference

http://securityreason.com/securityalert/4918
http://www.securityfocus.com/bid/33185
https://exchange.xforce.ibmcloud.com/vulnerabilities/47851
https://www.exploit-db.com/exploits/7709
https://www.exploit-db.com/exploits/7713
https://www.exploit-db.com/exploits/7714
https://www.exploit-db.com/exploits/7715

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

29-09-2017 - 01:33

Objavljeno

20-01-2009 - 16:00