CVE-2009-4097: Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allow...

Security readout for executives and security teams

CVE-2009-4097 affects Serenity Audio Player 3.2.3 and earlier. A specially crafted M3U playlist containing an overly long URL can trigger a stack buffer overflow and may allow arbitrary code execution. Business risk is mainly where this old media player remains installed and users open untrusted playlist files. Exposure is likely limited to endpoints with Serenity Audio Player 3.2.3 or earlier installed, especially where users can receive or download M3U playlist files. No affected CPEs or enterprise platform details are provided in the source bundle. Prioritize if the software exists in your environment. The vulnerability can lead to code execution, but impact is constrained by presence of a legacy application and user interaction with malicious playlist files. Mitigation focus: Inventory endpoints for Serenity Audio Player 3.2.3 or earlier.; Remove the application if it is not business-required.; Check vendor or trusted advisories for upgrade or replacement guidance..

Prepared

Jun 28, 2026, 13:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.