cve/2009/CVE-2009-1437.md

CVE-2009-1437

Description

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.

POC

Reference

• https://hansesecure.de/vulnerability-in-coolplayer/
• https://hansesecure.de/vulnerability-in-coolplayer/
• https://www.exploit-db.com/exploits/8489
• https://www.exploit-db.com/exploits/8489
• https://www.exploit-db.com/exploits/8519
• https://www.exploit-db.com/exploits/8519
• https://www.exploit-db.com/exploits/8520
• https://www.exploit-db.com/exploits/8520

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/HanseSecure/CVE-2009-1437