CVE-2009-1209
W3C Amaya Web Browser 11.1 - Remote Code Execution via Long Defer Attribute in Script Tag
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-1209. PoCs published by His0k4, Encrypt3d.M!nd, Alfons Luja.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Amaya 11.2 via a crafted HTML file with a 'defer' attribute. It uses SEH overwriting and shellcode execution to achieve remote code execution (RCE).
Description
Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Amaya 11.2 via a crafted HTML file with a 'defer' attribute. It uses SEH overwriting and shellcode execution to achieve remote code execution (RCE).
This exploit targets a stack overflow vulnerability in Amaya 11.1 via a maliciously crafted HTML file with a long 'defer' attribute. It uses a combination of NOP sleds and shellcode to achieve remote code execution, specifically launching calc.exe via Metasploit-generated payload.
This exploit demonstrates a stack overflow vulnerability in Amaya 11.1 by overwriting the SEH handler. It generates a malicious HTML file that triggers the overflow when processed by the vulnerable software.