CVE-2008-0550
Steamcast < 0.9.75 - Remote Code Execution via HTTP User-Agent Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-0550.
PoCs published by Metasploit, including Metasploit module exploits/windows/http/steamcast_useragent.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Streamcast <= 0.9.75 via an overly long HTTP User-Agent header. It includes a payload encoder and targets specific Windows versions for remote code execution.
Description
Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.
Exploits (2)
This is a Metasploit module exploiting a stack buffer overflow in Streamcast <= 0.9.75 via an overly long HTTP User-Agent header. It includes a payload encoder and targets specific Windows versions for remote code execution.
This Metasploit module exploits a stack buffer overflow in Streamcast <= 0.9.75 via an overly long HTTP User-Agent header, allowing arbitrary code execution. It includes a check method to verify the target and uses a structured payload with bad character avoidance.