CVE-2009-1612
high · 9.3Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected.
9.3
CVSS
33.3%
EPSS (exploit prob.)
98th
EPSS percentile
2009-05-11
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| baofeng | storm | 2.7.9_8 |
| baofeng | storm | 2.7.9_10 |
| baofeng | storm | 2.8 |
| baofeng | storm | 2.9 |
| baofeng | storm | 3.9.3_25 |
| baofeng | storm | 3.9.3_30 |
| baofeng | storm | 3.9.4_17 |
| baofeng | storm | 3.9.4_27 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/34944
- http://www.cisrt.org/enblog/read.php?245
- http://www.securityfocus.com/bid/34789
- https://www.exploit-db.com/exploits/8579
- http://secunia.com/advisories/34944
- http://www.cisrt.org/enblog/read.php?245
- http://www.securityfocus.com/bid/34789
- https://www.exploit-db.com/exploits/8579
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2009-1612