CVE-2009-4656 Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service (application crash) and pos...
HighCVSS 9.3
EPSS 31.6%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a playlist file (.pls) containing a long string. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| e-soft.co dj studio pro | = 4.2 | No fix listed |
| e-soft.co dj studio pro | = 4.2.2.7.5 | No fix listed |
| e-soft.co dj studio pro | = 5.1 | No fix listed |
| e-soft.co dj studio pro | = 5.1.4.3.1 | No fix listed |
References
- 36728 third-party-advisory vendor-advisory
- 9691 exploit
- ADV-2009-2681 vdb-entry vendor-advisory
- djstudio-pls-dos(53310) vdb-entry