CVE-2009-1612
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 33%
from disclosure to weapon354 days
Published on NVDMay 11
1st PoC+354d
metasploitApr 30
VulnCheckMay 11
exploitation probability
33%top 2% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/8579unverifiedexploitdbwww.exploit-db.com/exploits/16553unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.