CVE-2009-10006
CRITICALUFO: Alien Invasion <= 2.2.1 - Stack-based Buffer Overflow in IRC Client via Crafted 001 Message
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-10006.
PoCs published by Metasploit, Jason Geffner, Jason Geffner, dookie, including Metasploit module exploits/windows/misc/ufo_ai.
AI-analyzed exploit summary This is a functional Metasploit module exploiting a buffer overflow in the IRC client component of UFO: Alien Invasion 2.2.1. It crafts a malicious IRC server response to trigger a stack-based overflow, leading to arbitrary code execution on Mac OS X 10.5.8 x86 systems.
Description
UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply (specifically a 001 message), the application fails to properly validate the length of the response string. This results in a stack-based buffer overflow, which may corrupt control flow structures and allow arbitrary code execution. The vulnerability is triggered during automatic IRC connection handling and does not require user interaction beyond launching the game.
Exploits (4)
This is a functional Metasploit module exploiting a buffer overflow in the IRC client component of UFO: Alien Invasion 2.2.1. It crafts a malicious IRC server response to trigger a stack-based overflow, leading to arbitrary code execution on Mac OS X 10.5.8 x86 systems.
This exploit demonstrates a buffer overflow vulnerability in the IRC client component of UFO: Alien Invasion 2.2.1, allowing remote arbitrary code execution via a malformed server response. The PoC packet overwrites the return address to execute shellcode launching 'mspaint.exe'.
This Metasploit module exploits a buffer overflow in the IRC client component of UFO: Alien Invasion 2.2.1 by sending a crafted IRC response to trigger a stack-based overflow, leading to remote code execution.
This Metasploit module exploits a buffer overflow in the IRC client of UFO: Alien Invasion 2.2.1 on Mac OS X 10.5.8 x86. It leverages a heap-based execution payload stub to achieve remote code execution via a crafted IRC server response.
References (6)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N