CVE-2009-1641
Mini-stream Ripper 3.0.1.1 - Remote Code Execution via Long RTSP URL or HREF Attribute
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-1641.
PoCs published by G4N0K, including Metasploit module exploits/windows/fileformat/shadow_stream_recorder_bof.
AI-analyzed exploit summary This Perl script exploits a local buffer overflow in Mini-stream Ripper 3.0.1.1 by crafting a malicious .RAM file with an overly long RTSP URL, followed by a NOP sled, return address, and shellcode to execute arbitrary commands (e.g., calc.exe).
Description
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.
Exploits (3)
This Perl script exploits a local buffer overflow in Mini-stream Ripper 3.0.1.1 by crafting a malicious .RAM file with an overly long RTSP URL, followed by a NOP sled, return address, and shellcode to execute arbitrary commands (e.g., calc.exe).
This Perl script generates a malicious .ASX file that exploits a local buffer overflow vulnerability in Mini-stream Ripper 3.0.1.1 via an overly long HREF attribute. It includes a Metasploit-generated shellcode payload to execute arbitrary commands (e.g., calc.exe).
This Metasploit module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7 by crafting a malicious ASX file. The exploit triggers arbitrary code execution when the victim opens the file, leveraging a known vulnerable DLL return address.