CVE-2009-1437

CRITICAL 9.3CVE-2009-1437 · Published 27/04/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
coolplayer coolplayer	`= 2.19.1`	No fix yet

Description

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.

References

osvdb.org/53885
secunia.com/advisories/34816 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/49984
hansesecure.de/vulnerability-in-coolplayer
exploit-db.com/exploits/8489
exploit-db.com/exploits/8519
exploit-db.com/exploits/8520

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free