CVE-2009-3812
OtsAV DJ, Radio, and TV 1.85.64.0 - Heap-Based Buffer Overflow via Long Playlist in OFL File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3812. PoCs published by Stack, hack4love.
AI-analyzed exploit summary This exploit demonstrates a local heap overflow vulnerability in OtsAv DJ, TV, and Radio software by creating a malicious .olf playlist file with an excessive number of 'A' or 'E' characters, leading to potential arbitrary code execution.
Description
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.0, and Free version 1.77.001 allows remote attackers to execute arbitrary code via a long playlist in an Ots File List (.ofl) file.
Exploits (2)
This exploit demonstrates a local heap overflow vulnerability in OtsAv DJ, TV, and Radio software by creating a malicious .olf playlist file with an excessive number of 'A' or 'E' characters, leading to potential arbitrary code execution.
This exploit is a local heap overflow PoC for otsAV DJ 1.85.064, which crashes the application by writing a large buffer of 'A' characters to a .ofl file. It demonstrates a DoS condition via a trivial buffer overflow.