CVE-2009-1087

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the (1) synacast, (2) Play, (3) pplsv, or (4) ppvod URI handler. NOTE: some of these details are obtained from third party information.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

5.14% chance of exploitation in the next 30 days, 92th percentile

Published

2009-03-25

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8215

References

• CVE Record
• NVD entry

Related

• CVE-2009-1071
• CVE-2009-1088
• CVE-2009-1070
• CVE-2009-1092
• CVE-2009-1068
• CVE-2009-1122