CVE-2009-1645

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 7.1%

exploitation probability

7.1%top 6% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/8634unverified cve_referencewww.exploit-db.com/exploits/8633unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/50376 https://www.exploit-db.com/exploits/8633 https://www.exploit-db.com/exploits/8634 http://www.securityfocus.com/bid/34860 http://www.securityfocus.com/bid/34864