CVE-2009-1327
Mini-stream WM Downloader 3.0.0.9 - Stack-based Buffer Overflow via Long URI in Playlist File
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2009-1327. PoCs published by Cyber-Zone, Stack.
AI-analyzed exploit summary This Perl script generates a malicious .M3U file that triggers a local stack overflow in WM Downloader when parsed. The exploit leverages a buffer overflow vulnerability (CVE-2009-1329) by crafting an overly long HTTP URL in the M3U file, leading to arbitrary code execution.
Description
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
Exploits (6)
This Perl script generates a malicious .M3U file that triggers a local stack overflow in WM Downloader when parsed. The exploit leverages a buffer overflow vulnerability (CVE-2009-1329) by crafting an overly long HTTP URL in the M3U file, leading to arbitrary code execution.
This exploit targets a stack overflow vulnerability in WM Downloader 3.0.0.9 via a maliciously crafted .m3u file. It uses a universal return address and shellcode to achieve remote code execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in RM Downloader when parsed. The exploit uses a long HTTP URL (26109 'A' characters) to overwrite the stack, leading to arbitrary code execution (EIP control demonstrated with 0x41414141).
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream RM-MP3 Converter when opened. The exploit uses a long HTTP URL string to overwrite the EIP register, demonstrating a classic buffer overflow vulnerability.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream Ripper when parsed. The exploit uses a long HTTP URL (26129 'A' characters) to overwrite the stack, leading to arbitrary code execution via EIP control.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in ASX to MP3 Converter when processed. The exploit uses a long HTTP URL (26121 'A' characters) to overwrite the EIP register, demonstrating a classic buffer overflow vulnerability.