CVE-2009-1646
Mini-stream RM Downloader 3.0.0.9 - Stack-based Buffer Overflow via Long RTSP URL
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1646. PoCs published by G4N0K, TUNISIAN CYBER.
AI-analyzed exploit summary This exploit targets a local buffer overflow in RM Downloader 3.0.0.9 by crafting a malicious .RAM file with an oversized RTSP URL and embedded shellcode to execute arbitrary commands (e.g., calc.exe).
Description
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.
Exploits (2)
This exploit targets a local buffer overflow in RM Downloader 3.0.0.9 by crafting a malicious .RAM file with an oversized RTSP URL and embedded shellcode to execute arbitrary commands (e.g., calc.exe).
This exploit targets a local buffer overflow in RM Downloader v2.7.5.400 by overwriting the EIP with a specific address and executing a shellcode payload. The payload is a MessageBox shellcode designed to work on any Windows version.