CVE-2009-1356

Elecard Avc HD Player - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by fl0 fl0w · cdoswindows

https://www.exploit-db.com/exploits/8452

View Code ZIP pw:eip

References (2)

[Exploit] http://www.securityfocus.com/bid/34560

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/8452

Scores

EPSS 0.1507

EPSS Percentile 94.6%

Details

CWE

CWE-119

Status published

Products (1)

elecard/elecard_avc_hd_player

Published Apr 21, 2009

Tracked Since Feb 18, 2026