4.3
CVSSv2

CVE-2009-3449

Published: 29/09/2009 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

MP3 Collector 2.3 allows remote malicious users to cause a denial of service (application crash) via a long URL in a .m3u playlist file.

Vulnerable Product Search on Vulmon Subscribe to Product

collectorz mp3 collector 2.3

Exploits

#!/usr/bin/perl # MP3 Collector 23 (m3u File) Local Crash PoC # By : zAx # Application Homepage : collectorzcom # Application Download : downloadscollectorzcom/mp3collectorsetupexe # Go to Playlist menu, select Open Playlist, Select the File and a click on file name $header = ""; $crash = "\x41" x 9500; # Just a Random s ...