CVE-2009-3969

CVE-2009-3969 describes a stack-based buffer overflow vulnerability in Faslo Player 7.0. This flaw allows remote attackers to trigger a denial of service or potentially execute arbitrary code by supplying an overly long string within a .m3u playlist file. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.