CVE-2009-1645
Mini-stream Easy RM-MP3 Converter 3.0.0.7 - Remote Code Execution via Long RTSP URL or HREF Attribute
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1645. PoCs published by G4N0K.
AI-analyzed exploit summary This Perl script exploits a local buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 by crafting a malicious .RAM file with an overly long RTSP URL, followed by a return address and shellcode to execute arbitrary commands (e.g., calc.exe).
Description
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.
Exploits (2)
This Perl script exploits a local buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 by crafting a malicious .RAM file with an overly long RTSP URL, followed by a return address and shellcode to execute arbitrary commands (e.g., calc.exe).
This Perl script generates a malicious .ASX file that exploits a local buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 via an overly long HREF attribute. It includes a Metasploit-generated shellcode payload to execute arbitrary commands (e.g., calc.exe).