Buffer overflow in Sorinara Streaming Audio Player

CVE-2009-2568

Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.

Vulnerability class: Buffer Overflow

EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2009-2568?
CVE-2009-2568 is a vulnerability in Sorinara Streaming Audio Player, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-07-22.
Is CVE-2009-2568 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.