CVE-2009-1329
Mini-stream Shadow Stream Recorder 3.0.1.7 - Remote Code Execution via Long URI in Playlist File
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2009-1329. PoCs published by AlpHaNiX, Cyber-Zone.
AI-analyzed exploit summary This Perl script exploits a local stack overflow vulnerability in Shadow Stream Recorder via a maliciously crafted .m3u file. It includes multiple payloads (bind shell, command execution, and user addition) encoded with Metasploit's PexFnstenvSub encoder.
Description
Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
Exploits (7)
This Perl script exploits a local stack overflow vulnerability in Shadow Stream Recorder via a maliciously crafted .m3u file. It includes multiple payloads (bind shell, command execution, and user addition) encoded with Metasploit's PexFnstenvSub encoder.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream RM-MP3 Converter when parsed. The exploit uses a long HTTP URL string (26121 'A' characters) to overwrite the stack, leading to arbitrary code execution (EIP control).
This exploit targets a stack overflow vulnerability in Easy RM to MP3 Converter by crafting a malicious .pls file with a long string of junk data, a specific EIP overwrite address, NOP sled, and shellcode to achieve remote code execution.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in WM Downloader when parsed, leading to arbitrary code execution. The exploit leverages a buffer overflow vulnerability by crafting an overly long HTTP URL string.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in RM Downloader when parsed. The exploit uses a long HTTP URL (26109 'A' characters) to overwrite the stack and crash the application, demonstrating a buffer overflow vulnerability.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in Mini-stream Ripper when parsed. The exploit uses a long HTTP URL string (26129 'A' characters) to overwrite the stack and control EIP, demonstrating a classic buffer overflow vulnerability.
This Perl script generates a malicious .M3U file that triggers a local stack overflow in ASX to MP3 Converter when processed. The exploit uses a long HTTP URL string (26121 'A' characters) to overwrite the stack, leading to arbitrary code execution (EIP control).