CVE-2009-4656

CVE-2009-4656 is a stack-based buffer overflow vulnerability affecting E-Soft DJ Studio Pro versions 4.2 and 5.x. An attacker can exploit this by crafting a malicious playlist (.pls) file containing an overly long string, leading to a denial of service (application crash) and potentially arbitrary code execution. With a CVSS score of 9.3, this vulnerability is critical, requiring user interaction (e.g., opening the malicious file) but allowing remote attackers to achieve full compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, multiple Metasploit modules and ExploitDB entries exist, indicating readily available exploit code, though there is no evidence of widespread active exploitation or significant community discussion.