CVE-2009-2375

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-07-08 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long File_Name parameter in a .pdm file. NOTE: some of these details are obtained from third party information.

Affected products

Photo-Dvd-Maker Photo Dvd Maker: through 8.0.2; 5.20, 5.30, 5.31, 6.0, 6.01, 6.10 (+41)

References

http://blog.bkis.com/?p=713
http://secunia.com/advisories/35709
http://www.securityfocus.com/archive/1/504738/100/0/threaded
http://www.vupen.com/english/advisories/2009/1793
http://blog.bkis.com/?p=713
http://secunia.com/advisories/35709
http://www.securityfocus.com/archive/1/504738/100/0/threaded
http://www.vupen.com/english/advisories/2009/1793

Get alerted when CVE-2009-2375 or the next vulnerability affects your stack