CVE-2009-3969

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-11-18 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file.

Affected products

Faslo Player: 7.0

References

http://secunia.com/advisories/36444
http://www.exploit-db.com/exploits/9487
http://www.vupen.com/english/advisories/2009/2395
http://secunia.com/advisories/36444
http://www.exploit-db.com/exploits/9487
http://www.vupen.com/english/advisories/2009/2395

Get alerted when CVE-2009-3969 or the next vulnerability affects your stack