CVE-2009-1627: SDP Multimedia Streaming Download Project

High severity, CVSS 9.3. EPSS: 7.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file.

Affected products

• SDP Multimedia Streaming Download Project: version 2.3.0 only

Published 2009-05-12. Last modified 2026-06-16.