CVE-2008-0661
dBpowerAMP Audio Player Release 2 - Buffer Overflow via Long URI in .M3U File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-0661. PoCs published by securfrog.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in dBpowerAMP Audio Player Release 2 via a maliciously crafted M3U file. It delivers a reverse shell payload to execute arbitrary commands (e.g., adding a user) when the file is processed.
Description
Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file with a long URI. NOTE: this might be the same issue as CVE-2004-1569.
Exploits (2)
This exploit targets a buffer overflow vulnerability in dBpowerAMP Audio Player Release 2 via a maliciously crafted M3U file. It delivers a reverse shell payload to execute arbitrary commands (e.g., adding a user) when the file is processed.
This exploit demonstrates a remote buffer overflow in dBpowerAMP Audio Player Release 2 by creating a malicious .m3u file with an overly long HTTP URL. The overflow occurs when the player processes the file, leading to a crash (access violation) at address 0x41414141.