CVE-2009-1328
Mini-stream RM-MP3 Converter 3.0.0.7 - Stack-based Buffer Overflow via Long URI in Playlist File
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2009-1328. PoCs published by Ptrace Security, Cyber-Zone, Stack.
AI-analyzed exploit summary This is a functional exploit for a local buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30, leveraging ROP chains to bypass ASLR and DEP, ultimately achieving arbitrary code execution.
Description
Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
Exploits (7)
This is a functional exploit for a local buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30, leveraging ROP chains to bypass ASLR and DEP, ultimately achieving arbitrary code execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream RM-MP3 Converter when parsed. The exploit uses a long HTTP URL string (26121 'A' characters) to overwrite the stack, leading to arbitrary code execution (EIP control).
This Perl script exploits a stack overflow vulnerability in Mini-stream RM-MP3 Converter 3.0.0.7 by crafting a malicious .m3u file with an overly long HTTP URL, a return address, NOP sled, and shellcode to achieve remote code execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in WM Downloader when parsed. The exploit uses a long HTTP URL (26121 'A' characters) to overwrite the stack, leading to arbitrary code execution via EIP control.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in RM Downloader when parsed. The exploit uses a long HTTP URL (26109 'A' characters) to overwrite the stack, leading to arbitrary code execution (EIP control demonstrated with 0x41414141).
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream Ripper when parsed. The exploit uses a long HTTP URL (26129 'A' characters) to overwrite the stack, leading to arbitrary code execution via EIP control.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in ASX to MP3 Converter when processed. The exploit uses a long HTTP URL string (26121 'A' characters) to overwrite the EIP register, demonstrating a classic buffer overflow vulnerability.