CVE-2007-5709 Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file.
HighCVSS 9.3
EPSS 10.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sony sonicstage connect player | = 4.3 | No fix listed |
References
- 41998 vdb-entry
- 27270 third-party-advisory vendor-advisory
- 26241 vdb-entry
- sony-connect-m3u-bo(38160) vdb-entry
- 4583 exploit