CVE-2009-4656
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 32%
from disclosure to weapon0 days
Published on NVDMar 3
1st PoCSep 15
metasploitDec 30
exploitation probability
32%top 2% of all CVEs
observed exploitation
nono source reports it
5 public exploit(s)
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a playlist file (.pls) containing a long string. NOTE: some of these details are obtained from third party information.
Affected products
n/a · n/apublic PoCs found — 5
cve_referencewww.exploit-db.com/exploits/9691unverifiedexploitdbwww.exploit-db.com/exploits/9691unverifiedexploitdbwww.exploit-db.com/exploits/18547unverifiedexploitdbwww.exploit-db.com/exploits/10827unverifiedexploitdbwww.exploit-db.com/exploits/18501unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.