CVE-2009-0182: Vuplayer

High severity, CVSS 8.8. EPSS: 48.4% chance of exploitation in the next 30 days.

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.

Affected products

• Vuplayer Vuplayer: up to and including 2.49

Published 2009-01-20. Last modified 2026-06-16.