CVE-2009-0490
Audacity < 1.3.6 - Stack-based Buffer Overflow in String_parse::get_nonspace_quoted
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-0490. PoCs published by Encrypt3d.M!nd, mr_me, Houssamix.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Audacity 1.2.6 via a maliciously crafted .gro file. It uses a combination of NOP sleds, shellcode, and a specific return address to achieve remote code execution on Windows XP SP3.
Description
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Audacity 1.2.6 via a maliciously crafted .gro file. It uses a combination of NOP sleds, shellcode, and a specific return address to achieve remote code execution on Windows XP SP3.
This exploit targets a buffer overflow vulnerability in Audacity <= 1.2 by crafting a malicious .gro file. It includes shellcode for a reverse shell to 192.168.2.3, demonstrating remote code execution.
This Perl script generates a malformed .gro file with a long string of 'A' characters (2000 bytes) to trigger a local buffer overflow in Audacity 1.2.6 when importing the file via 'Project > Import MIDI'. The crash results in an access violation and SEH overwrite, as demonstrated by the provided register dump.