CVE-2009-1815: Sonicspot Audioactive Player

High severity, CVSS 9.3. EPSS: 5.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via a long string in a playlist file, as demonstrated by a long .mp3 URL in a .m3u file.

Affected products

  • Sonicspot Audioactive Player: version 1.93b only

Published 2009-05-29. Last modified 2026-06-16.