CVE-2006-2465
mp3info 0.8.4 - Buffer Overflow via Long Command Line Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-2465. PoCs published by Ayman Sagy, jsacco.
AI-analyzed exploit summary This exploit leverages a structured exception handler (SEH) overflow in MP3Info 0.8.5 to achieve remote code execution by overwriting the SEH record and redirecting execution to a shellcode payload. The exploit uses a combination of trampolines and short jumps to bypass memory constraints and execute a calc payload.
Description
Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.
Exploits (2)
This exploit leverages a structured exception handler (SEH) overflow in MP3Info 0.8.5 to achieve remote code execution by overwriting the SEH record and redirecting execution to a shellcode payload. The exploit uses a combination of trampolines and short jumps to bypass memory constraints and execute a calc payload.
This exploit targets a stack-based buffer overflow in mp3info, using a NOP sled and shellcode to execute '/bin/sh'. The payload is constructed with junk data, shellcode, and a controlled EIP overwrite.