« Volver al listado

CVE-2009-4097

Estado: ModificadaAlta (9.3)—💥 Exploit

Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote attackers to execute arbitrary code via a long URL in an M3U file. NOTE: some of these details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (1)

Malsmith — Serenity Audio Player

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-4097",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-11-29T13:08:29.327",
  "references": [
    {
      "url": "http://osvdb.org/60503",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.org/0911-exploits/serenityaudio-overflow.txt",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/37472",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/10226",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54430",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/60503",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstormsecurity.org/0911-exploits/serenityaudio-overflow.txt",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/37472",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/10226",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54430",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote attackers to execute arbitrary code via a long URL in an M3U file.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en la función MplayInputFile en Serenity Audio Player v3.2.3 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de una URL larga en un archivo M3U. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."
    }
  ],
  "lastModified": "2026-06-16T23:13:01.917",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:malsmith:serenity_audio_player:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F08EC0D7-E143-421D-ACF5-EB5F0F268892",
              "versionEndIncluding": "3.2.3"
            },
            {
              "criteria": "cpe:2.3:a:malsmith:serenity_audio_player:3.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF3A99F0-7A8F-4BFC-A405-DE981337A24A"
            },
            {
              "criteria": "cpe:2.3:a:malsmith:serenity_audio_player:3.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D382B720-646C-4682-851F-9CB10BC8CC29"
            },
            {
              "criteria": "cpe:2.3:a:malsmith:serenity_audio_player:3.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A313B0EE-F4E4-4BC6-93A0-06573CF086C1"
            },
            {
              "criteria": "cpe:2.3:a:malsmith:serenity_audio_player:3.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "661392ED-C6E4-48FF-AAC3-E8978327AEEF"
            },
            {
              "criteria": "cpe:2.3:a:malsmith:serenity_audio_player:3.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "262A0504-BF5B-46D2-BB13-7F622D770776"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}