CVE-2009-1642

This Metasploit module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7 by crafting a malicious ASX file. The exploit leverages a stack-based overflow to achieve arbitrary code execution under the context of the user.

This exploit targets a local buffer overflow in Shadow Stream Recorder 3.0.1.7 via a malformed .asx file. It leverages a JMP ESP instruction in USER32.dll to redirect execution to a calc.exe-payload shellcode.

This exploit targets a local stack overflow vulnerability in ASX to MP3 Converter Version 3.0.0.100 by crafting a malicious ASX file with a long HTTP URL followed by a return address and shellcode. The shellcode executes calc.exe as a proof of concept.

This exploit demonstrates a local stack overflow vulnerability in ASX to MP3 Converter Version 3.0.0.100 by creating a malformed ASX file with an overly long HTTP URL, leading to EIP overwrite with 'A's (0x41).

This Perl script exploits a local buffer overflow vulnerability in Mini-stream ASX to MP3 Converter 3.0.0.7 by crafting a malicious .RAM file with an oversized RTSP URL, followed by a NOP sled, return address, and shellcode to execute arbitrary commands (e.g., calc.exe).

This Perl script generates a malicious .ASX file that exploits a local buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 via an overly long HREF attribute, leading to arbitrary code execution (calc.exe payload).