VULNERABILITY INTELLIGENCE
CVE-2009-0885
CVSS score9.3 HIGH
EPSS probability8.75%
CISA KEVNot currently listed
Published2009-03-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a (1) M3U, (2) M3l, (3) TXT, and (4) LRC playlist file.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer