Vulnerability Details : CVE-2009-0476

Metasploit modules for CVE-2009-0476

• Audiotran 1.4.1 (PLS File) Stack Buffer Overflow

  Disclosure Date: 2010-01-09

  First seen: 2020-04-26

  exploit/windows/fileformat/audiotran_pls

  This module exploits a stack-based buffer overflow in Audiotran 1.4.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS exte

  More information

• Audio Workstation 6.4.2.4.3 pls Buffer Overflow

  Disclosure Date: 2009-12-08

  First seen: 2020-04-26

  exploit/windows/fileformat/audio_wkstn_pls

  This module exploits a buffer overflow in Audio Workstation 6.4.2.4.3. When opening a malicious pls file with the Audio Workstation, a remote attacker could overflow a buffer and execute arbitrary code. Authors: - germaya_x - dookie

  More information

CVSS scores for CVE-2009-0476

CWE ids for CVE-2009-0476

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
  Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-0476

Products affected by CVE-2009-0476