CVE-2009-1612 - CVE House
Back to Database
Status published Critical CVE-2009-1612

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll...

Vulnerability Description

Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-1612

Credits & Attribution

No credits recorded in the NVD database.

References

More from baofeng

View All →
CVE-2009-2617
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows...
Critical 9.3
CVE-2009-1807
Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier...
Critical 9.3
CVE-2007-4943
Multiple buffer overflows in a certain ActiveX control in sparser.dll...
Critical 9.3
CVE-2007-4816
Multiple buffer overflows in the BaoFeng2 storm ActiveX control in...
High 7.5

Affected Vendor

Affected Software

storm
Vulnerable Versions:
2.7.9_8, 2.7.9_10, 2.8, 2.9, 3.9.3_25, 3.9.3_30, 3.9.4_17, 3.9.4_27

Timeline

Official Publish: May 11th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.