Resource exhaustion in Sony Playstation 3
CVE-2009-2541
The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumption and console hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.034 (88.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 88.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.034 · newest: 0.034 · change: 0.000
Affected products
Weakness classification (CWE)
References
- www.g-sec.lu/one-bug-to-rule-them-all.html
- exchange.xforce.ibmcloud.com/vulnerabilities/52875 (vdb-entry)
- www.securityfocus.com/archive/1/504988/100/0/threaded (mailing-list)
- www.securityfocus.com/archive/1/505006/100/0/threaded (mailing-list)
- www.exploit-db.com/exploits/9160 (exploit)
- www.securityfocus.com/archive/1/504969/100/0/threaded (mailing-list)
- www.securityfocus.com/archive/1/504989/100/0/threaded (mailing-list)
Frequently asked questions
- What is CVE-2009-2541?
- CVE-2009-2541 is a high-severity vulnerability in Sony Playstation 3, classified under CWE-399. CVSS score: 7.5/10. Published 2009-07-20.
- How severe is CVE-2009-2541?
- High severity. CVSS v3 base score is 7.5 out of 10.