Skip to content

CVE-2009-1646

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to...

9.3 HighPublic exploit

CVE-2009-1646 is a high vulnerability (CVSS 9.3) in Mini-stream Rm Downloader, published May 15, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.06%, the 92nd percentile. No source names a fixed version.

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.

Exploit likelihood

5.06%Up 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.

Record: CVE-2009-1646
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.

Record: CVE-2009-1646
Updated: 2026-11-02

EUVDEUVD-2009-1641 No score

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.

Record: EUVD-2009-1641
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4mqm-mp52-r732 No score

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to...

Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.

Record: GHSA-4mqm-mp52-r732
Weakness: CWE-119
Updated: 2026-11-02

Affected products

mini-stream rm downloader

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	RM Downloader 2.7.5.400 - Local Buffer Overflow	2015-03-26
Exploit-DB	RM Downloader 3.0.0.9 - '.RAM' Local Buffer Overflow	2009-05-07

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References