CVE-2009-1566

Published: Dec 3, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions.

Affected (2)

Products: Roxio: Creator, Easy Media Creator

Roxio

2 products

Creator

Easy Media Creator

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Roxio Creator	Up to 9.0.136
Roxio Easy Media Creator	Version 9.0.136

Related CWEs

CWE-189

References (12)

http://secunia.com/advisories/36069

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2009-38/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/archive/1/508165/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/37183

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2009/3375

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/54496

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/36069