CVE-2009-3812

Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.0, and Free version 1.77.001 allows remote attackers to execute arbitrary code via a long playlist in an Ots File List (.ofl) file.

• CWE-119

• http://osvdb.org/55747
• http://packetstormsecurity.org/0907-exploits/otsav-overflow.txtExploit
• http://secunia.com/advisories/35738Vendor Advisory
• http://www.exploit-db.com/exploits/9113
• http://www.vupen.com/english/advisories/2009/1861Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51628
• http://osvdb.org/55747
• http://packetstormsecurity.org/0907-exploits/otsav-overflow.txtExploit
• http://secunia.com/advisories/35738Vendor Advisory
• http://www.exploit-db.com/exploits/9113
• http://www.vupen.com/english/advisories/2009/1861Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51628

Published

Oct 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3806SQL injection vulnerability in feedback_js.php in DedeCMS 5.…
• CVE-2009-3807Stack-based buffer overflow in MixVibes 7.043 Pro allows rem…
• CVE-2009-3808MixSense DJ Studio 1.0.0.1 allows remote attackers to cause …
• CVE-2009-3809Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remo…
• CVE-2009-3810Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.47…
• CVE-2009-3811Stack-based buffer overflow in Music Tag Editor 1.61 build 2…
• CVE-2009-3813Multiple SQL injection vulnerabilities in RunCMS 2M1 allow r…
• CVE-2009-3814Static code injection vulnerability in RunCMS 2M1 allows rem…
• CVE-2009-3815RunCMS 2M1, when running with certain error_reporting levels…
• CVE-2009-3816Multiple cross-site scripting (XSS) vulnerabilities in Activ…
• CVE-2009-3817PHP remote file inclusion vulnerability in doc/releasenote.p…
• CVE-2009-3818Unspecified vulnerability in the session handling feature in…