CVE-2009-2485

CVE-2009-2485 is a critical stack-based buffer overflow vulnerability affecting HT-MP3Player 1.0, allowing remote attackers to execute arbitrary code via a specially crafted, long string within a .ht3 file. With a CVSS score of 9.3, it presents a high risk due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating a high potential for exploitation, despite a lack of observed active exploitation or significant community discussion.