Exploitation Summary
EIP tracks 5 public exploits for CVE-2009-0546.
PoCs published by Metasploit, fl0 fl0w, cenjan, including Metasploit module exploits/windows/fileformat/feeddemon_opml.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in FeedDemon <= 3.1.0.12 via a maliciously crafted OPML file. It leverages SEH overwrites and alphanumeric mixed encoding to achieve arbitrary code execution.
Description
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file.
Exploits (5)
This Metasploit module exploits a stack-based buffer overflow in FeedDemon <= 3.1.0.12 via a maliciously crafted OPML file. It leverages SEH overwrites and alphanumeric mixed encoding to achieve arbitrary code execution.
This exploit targets a buffer overflow vulnerability in FeedDemon's OPML file parsing. It crafts a malicious OPML file with shellcode and a NOP sled to achieve remote code execution by overwriting the EIP with a return-to-ESP address.
This Perl script generates a malicious OPML file that exploits a buffer overflow vulnerability in FeedDemon 2.7.0.0. The exploit triggers a stack-based overflow via a crafted OPML file, leading to arbitrary code execution (calc.exe).
This Perl script generates a malicious OPML file with an overly long 'text' tag to trigger a buffer overflow in FeedDemon 2.7.0.0, leading to a DoS condition. The PoC leverages the XML::OPML module to craft the exploit file.
This Metasploit module exploits a stack buffer overflow in FeedDemon v3.1.0.12 via a crafted OPML file, achieving arbitrary code execution through SEH overwrite and alphanumeric shellcode.