Unrated severityNVD Advisory· Published May 11, 2009· Updated Apr 23, 2026
CVE-2009-1612
CVE-2009-1612
Description
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected.
Affected products
8cpe:2.3:a:baofeng:storm:2.7.9_8:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:baofeng:storm:2.7.9_8:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:2.7.9_10:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:2.8:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:2.9:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:3.9.3_25:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:3.9.3_30:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:3.9.4_17:*:*:*:*:*:*:*
- cpe:2.3:a:baofeng:storm:3.9.4_27:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/34789nvdExploitPatch
- secunia.com/advisories/34944nvdVendor Advisory
- www.cisrt.org/enblog/read.phpnvd
- www.exploit-db.com/exploits/8579nvd
News mentions
0No linked articles in our index yet.