CVE-2009-1566 describes an integer overflow vulnerability in Roxio Easy Media Creator 9.0.136 and Roxio Creator 2010 prior to SP1, which could allow remote attackers to execute arbitrary code through specially crafted image dimensions. This vulnerability carries a critical CVSS score of 9.3, indicating a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 9.0.136CPE matchmatch criteria | cpe:2.3:a:roxio:creator:*:*:*:*:*:*:*:* | ||
9.0.136CPE matchmatch criteria | cpe:2.3:a:roxio:easy_media_creator:9.0.136:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.