CVE-2009-1642
Mini-stream ASX to MP3 Converter 3.0.0.7 - Stack-based Buffer Overflow via Long rtsp URL or HREF Attribute
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2009-1642. PoCs published by Metasploit, b0telh0, Hazem mofeed.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7 by crafting a malicious ASX file. The exploit leverages a stack-based overflow to achieve arbitrary code execution under the context of the user.
Description
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also subsequently reported in "prior to 3.1.3.7."
Exploits (6)
This Metasploit module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7 by crafting a malicious ASX file. The exploit leverages a stack-based overflow to achieve arbitrary code execution under the context of the user.
This exploit targets a local buffer overflow in Shadow Stream Recorder 3.0.1.7 via a malformed .asx file. It leverages a JMP ESP instruction in USER32.dll to redirect execution to a calc.exe-payload shellcode.
This exploit targets a local stack overflow vulnerability in ASX to MP3 Converter Version 3.0.0.100 by crafting a malicious ASX file with a long HTTP URL followed by a return address and shellcode. The shellcode executes calc.exe as a proof of concept.
This exploit demonstrates a local stack overflow vulnerability in ASX to MP3 Converter Version 3.0.0.100 by creating a malformed ASX file with an overly long HTTP URL, leading to EIP overwrite with 'A's (0x41).
This Perl script exploits a local buffer overflow vulnerability in Mini-stream ASX to MP3 Converter 3.0.0.7 by crafting a malicious .RAM file with an oversized RTSP URL, followed by a NOP sled, return address, and shellcode to execute arbitrary commands (e.g., calc.exe).
This Perl script generates a malicious .ASX file that exploits a local buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 via an overly long HREF attribute, leading to arbitrary code execution (calc.exe payload).