Lucene search

K
cve[email protected]CVE-2009-2617
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-2617

2022-10-0316:24:08
CWE-119
web.nvd.nist.gov
26
cve-2009-2617
buffer overflow
medialib.dll
baofeng storm 3.9.62
remote code execution
.smpl playlist file

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.057 Low

EPSS

Percentile

93.4%

Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file.

Affected configurations

NVD
Node
baofengstormMatch3.9.62
CPENameOperatorVersion
baofeng:stormbaofeng stormeq3.9.62

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.057 Low

EPSS

Percentile

93.4%

Related for CVE-2009-2617