CVE-2009-0182

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

48.40% chance of exploitation in the next 30 days, 99th percentile

Published

2009-01-20

Updated

2024-08-07

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html
• http://securityreason.com/securityalert/4923
• nobodyatall648/CVE-2009-01820★ · 2021-06-25

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vuplayer_cue.…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/7695
• https://www.exploit-db.com/exploits/50650

References

• CVE Record
• NVD entry

Related

• CVE-2003-0264
• CVE-2011-2523
• CVE-2019-12744
• CVE-2019-1388
• CVE-2019-6340
• CVE-2021-3156