CVE-2009-3574

CVE-2009-3574 describes a critical vulnerability in Tuniac 090517c, where a remote attacker can trigger a denial of service or potentially execute arbitrary code. This is achieved by providing an excessively long "File1" argument within a .pls playlist file, likely exploiting a buffer overflow (CWE-119). The vulnerability has a CVSS score of 9.3, indicating high severity with network-based attacks, medium complexity, and complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Proof-of-Concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.