9.3
CVSSv2

CVE-2009-2484

Published: 16/07/2009 Updated: 07/11/2023
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 940
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file.

Vulnerable Product Search on Vulmon Subscribe to Product

videolan vlc_media_player 0.9.9

Exploits

#!/usr/bin/ruby # VideoLAN VLC Media Player 099 smb:// URI Stack-based Buffer Overflow (Proof-of-Concept) # # Bugtraq ID: 35500 # # The vulnerability can also be triggered via the VLC web interface (disabled by default): # [vulnerable_ip]:8080/requests/statusxml?command=in_play&input=smb:// # # Patch: # gitvideola ...
## # $Id: vlc_smb_urirb 10394 2010-09-20 08:06:27Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Met ...