cve/2009/CVE-2009-2617.md

CVE-2009-2617

Description

Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file.

POC

Reference

• http://marc.info/?l=full-disclosure&m=124624413120440&w=2
• http://marc.info/?l=full-disclosure&m=124627617220913&w=2

Github

No PoCs found on GitHub currently.