CVE-2009-2484

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

35.11%

Published

Jul 16, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

TrickestTrickest PoC index Exploit-DBVideoLAN VLC Media Player 0.9.9 - 'smb://' URI Stack Buffer Overflow (PoC)Exploit-DBVideoLAN VLC Client (Windows x86) - 'smb://' URI Buffer Overflow (Metasploit)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file.

Weaknesses (CWE)

CWE-119

Affected Products (2)

videolan · vlc_media_playervulnerable

microsoft · windows

References (12)

http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb805a76755efc5c6d5e080180f

http://secunia.com/advisories/35558

Vendor Advisory

http://www.exploit-db.com/exploits/9029

http://www.securityfocus.com/bid/35500

Exploit