Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-0182

EPSS 79.02% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0182

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
VUPlayer 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VUPlayer是用于 Windows 的开源多格式音频播放器。 VUPlayer 2.49及之前版本存在缓冲区错误漏洞。用户协助式攻击者可以借助.pls文件中的文件行中的一个长的URL，比如一个http URL，执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0182

#POC DescriptionSource LinkShenlong Link
1CVE-2009-0182 VUPlayer2.49_LocalBufferOverflowhttps://github.com/nobodyatall648/CVE-2009-0182POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0182

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-01-20 · 19 CVEs total

CVE-2009-0178IBM Hardware Management Console (HMC) 未明漏洞
CVE-2009-0177VMWare Workstation hcmon.sys驱动本地拒绝服务漏洞
CVE-2009-0176Research_In_Motion_Limited BlackBerry Unite!附件服务组件PDF Distiller远程代码执行漏洞
CVE-2009-0175Heathcosoft MP3 TrackMaker '.mp3'文件远程堆缓冲区溢出漏洞
CVE-2009-0174VUPlayer .asx播放列表文件处理缓冲区溢出漏洞
CVE-2008-5911RealNetworks Helix Server和Helix Mobile Server 多个缓冲区溢出漏洞
CVE-2009-0181VUPlayer 缓冲区溢出漏洞
CVE-2009-0180Nfs nfs-utils特定Fedora build脚本安全绕过漏洞
CVE-2009-0179Igno_Saitz libmikmod '.XM'文件远程拒绝服务漏洞
CVE-2007-6720Igno_Saitz libmikmod Multiple Sound Channel Media Playback远程拒绝服务漏洞
CVE-2008-5915Google Chrome 安全漏洞
CVE-2008-5914Apple Safari JavaScript执行工具未明函数创建和文件覆盖漏洞
CVE-2008-5913Mozilla Firefox和SeaMonkey JavaScript实现欺骗漏洞
CVE-2008-5912Microsoft Internet Explorer执行工具未明函数创建和文件覆盖漏洞
CVE-2008-5516Git 操作系统命令注入漏洞
CVE-2008-4388Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞
CVE-2008-2368Red Hat Certificate System 多个日志文件本地信息泄露漏洞
CVE-2008-2367Red Hat Certificate System 多个配置文件本地信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0182

No comments yet

Leave a comment