CVE-2009-4756

CVE-2009-4756 describes a stack-based buffer overflow in Beatport Player 1.0.0.0, specifically in TraktorBeatport.exe version 1.0.0.283. This vulnerability allows remote attackers to execute arbitrary code by supplying a long string within a malformed .m3u playlist file. It carries a critical CVSS score of 9.3, indicating a network-exploitable vulnerability with low attack complexity, requiring no authentication, and leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, multiple proof-of-concept exploits are publicly available on ExploitDB, demonstrating its exploitability. Despite the public exploits, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.