Record summary

CVE-2009-2961 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.

Description

Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a .MP3 playlist file.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBKOL Player 1.0 - '.mp3' Local Buffer Overflow (PoC)ExploitDB exploitby Evil.ManNot analyzed1 file
ExploitDB

PoC details

References

3