CVE-2009-2617

EUVD-2009-2612
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
baofengstorm
3.9.62
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://marc.info/?l=full-disclosure&m=124624413120440&w=2
http://marc.info/?l=full-disclosure&m=124627617220913&w=2
http://secunia.com/advisories/35592
http://www.securityfocus.com/bid/35512
http://marc.info/?l=full-disclosure&m=124624413120440&w=2
http://marc.info/?l=full-disclosure&m=124627617220913&w=2
http://secunia.com/advisories/35592
http://www.securityfocus.com/bid/35512