Executive Summary

Informations
NameCVE-2009-2550First vendor Publication2009-07-20
VendorCveLast vendor Modification2017-09-18

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score9.3Attack RangeNetwork
Cvss Impact Score10Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2550

CAPEC : Common Attack Pattern Enumeration & Classification

idName
CAPEC-8Buffer Overflow in an API Call
CAPEC-9Buffer Overflow in Local Command-Line Utilities
CAPEC-10Buffer Overflow via Environment Variables
CAPEC-14Client-side Injection-induced Buffer Overflow
CAPEC-24Filter Failure through Buffer Overflow
CAPEC-42MIME Conversion
CAPEC-44Overflow Binary Resource File
CAPEC-45Buffer Overflow via Symbolic Links
CAPEC-46Overflow Variables and Tags
CAPEC-47Buffer Overflow via Parameter Expansion
CAPEC-100Overflow Buffers

CWE : Common Weakness Enumeration

%idName
100 %CWE-119Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

OpenVAS Exploits

DateDescription
2009-07-23Name : Hamster Audio Player Buffer Overflow Vulnerability
File : nvt/secpod_hamster_audio_player_bof_vuln.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
55871Hamster Audio Player Multiple Playlist File Handling Overflow

Sources (Detail)

SourceUrl
EXPLOIT-DB http://www.exploit-db.com/exploits/9157
http://www.exploit-db.com/exploits/9172
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/51732

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
DateInformations
2017-09-19 09:23:19
  • Multiple Updates
2017-08-17 09:22:39
  • Multiple Updates
2016-06-28 17:46:25
  • Multiple Updates
2016-04-26 18:59:12
  • Multiple Updates
2013-05-10 23:54:18
  • Multiple Updates