CVE-2009-3717

Lucvil Patplayer - Memory Corruption

Title source: rule

Description

Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URI in a playlist (.m3u) file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Cyber-Zone · perldoswindows

https://www.exploit-db.com/exploits/9102

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://secunia.com/advisories/35756

[Vendor Advisory] http://www.vupen.com/english/advisories/2009/1860

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/9102

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/51624

[Third Party Advisory, VDB Entry] http://osvdb.org/55746

Scores

EPSS 0.1218

EPSS Percentile 93.9%

Details

CWE

CWE-119

Status published

Products (1)

lucvil/patplayer 3.9

Published Oct 16, 2009

Tracked Since Feb 18, 2026