$ cve CVE-2009-0476 JSON

CVE-2009-0476 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 37% (pctl 98)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for Euphonics Audio Player 1.0. NOTE: some of these details are obtained from third party information.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	37.04% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2009-02-08
Last modified	2026-06-16

Affected (5)

Vendor	Product
multimediasoft	audio dj studio for .net
multimediasoft	audio sound editer for .net
multimediasoft	audio sound recorder for .net
multimediasoft	audio sound studio for .net
multimediasoft	audio sound suite for .net

Public exploits

Source	Title	Date
exploit-db	MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH)	2010-09-15
exploit-db	Audiotran 1.4.1 - '.pls' Local Stack Buffer Overflow (Metasploit)	2010-01-28
exploit-db	Audiotran 1.4.1 (Windows XP SP2/SP3 English) - Local Buffer Overflow	2010-01-10
exploit-db	Audio Workstation - '.pls' Local Buffer Overflow (SEH)	2009-09-24
exploit-db	Euphonics Audio Player 1.0 - '.pls' Universal Local Buffer Overflow	2009-02-04
exploit-db	Euphonics Audio Player 1.0 (Windows XP SP3) - '.pls' Local Buffer Overflow	2009-02-04
exploit-db	Euphonics Audio Player 1.0 - '.pls' Local Buffer Overflow	2009-02-03

References

→ the Explorer · watch your stack · NVD