CVE-2009-0174: Vuplayer

High severity, CVSS 9.3. EPSS: 11.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.

Affected products

• Vuplayer Vuplayer: version 2.49 only

Published 2009-01-20. Last modified 2026-06-16.