CVE-2009-2934: Programmedintegration Pipl

High severity, CVSS 9.3. EPSS: 10.2% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a (1) .pls or (2) .pl playlist file.

Affected products

• Programmedintegration Pipl: version 2.5.0 only; version 2.5.0d only

Published 2009-08-21. Last modified 2026-06-16.