CVE-2009-1325
Mini-stream Ripper 3.0.1.1 - Stack-based Buffer Overflow via Long URI in Playlist File
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2009-1325. PoCs published by blake, Cyber-Zone, Stack.
AI-analyzed exploit summary This exploit bypasses DEP (Data Execution Prevention) in Mini-Stream 2.9.7 by leveraging a buffer overflow vulnerability. It uses ROP (Return-Oriented Programming) to disable DEP and execute shellcode that spawns calc.exe.
Description
Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
Exploits (7)
This exploit bypasses DEP (Data Execution Prevention) in Mini-Stream 2.9.7 by leveraging a buffer overflow vulnerability. It uses ROP (Return-Oriented Programming) to disable DEP and execute shellcode that spawns calc.exe.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream Ripper when opened. The exploit uses a long HTTP URL (26129 'A' characters) to overwrite the stack, leading to arbitrary code execution.
This Perl script exploits a stack overflow vulnerability in Mini-stream Ripper 3.0.1.1 by crafting a malicious .m3u file with an overly long HTTP URL and embedded shellcode. The exploit targets a universal return address and includes NOP sleds to ensure reliable execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in WM Downloader when parsed, leading to arbitrary code execution via a crafted HTTP URL with an overly long 'A' sequence (26121 bytes). The exploit leverages a buffer overflow vulnerability in the application's handling of M3U playlist files.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in RM Downloader when parsed. The exploit uses a long HTTP URL (26109 'A' characters) to overwrite the return address (EIP 0x41414141), demonstrating arbitrary code execution potential.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream RM-MP3 Converter when parsed. The exploit uses a long HTTP URL string to overwrite the stack and control EIP, demonstrating a classic buffer overflow vulnerability.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in ASX to MP3 Converter when processed. The exploit uses a long HTTP URL string (26121 'A' characters) to overwrite the stack and control EIP, as demonstrated in the provided OllyDbg registers.