CVE-2009-1667
Mini-stream CastRipper 2.50.70 - Stack-based Buffer Overflow via Long Entry in .m3u File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-1667. PoCs published by bibi-info, Super Cristal, Stack.
AI-analyzed exploit summary This exploit leverages a stack-based buffer overflow in CastRipper 2.50.70 via a maliciously crafted .M3U file to achieve arbitrary code execution (calc.exe) on Windows XP SP2. The payload uses a Metasploit-generated alphanumeric shellcode and overwrites the return address with a kernel32.dll address.
Description
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a different vector than CVE-2009-5137.
Exploits (4)
This exploit leverages a stack-based buffer overflow in CastRipper 2.50.70 via a maliciously crafted .M3U file to achieve arbitrary code execution (calc.exe) on Windows XP SP2. The payload uses a Metasploit-generated alphanumeric shellcode and overwrites the return address with a kernel32.dll address.
This exploit targets a stack overflow vulnerability in CastRipper 2.50.70 via a maliciously crafted .m3u file. It uses a universal JMP ESP address and alpha-numeric shellcode to execute arbitrary code (e.g., calc.exe).
This exploit targets a stack overflow vulnerability in CastRipper 2.50.70 via a maliciously crafted .m3u file. It uses a universal return address (jmp esp) and shellcode to achieve remote code execution.
This exploit targets a local buffer overflow vulnerability in CastRipper 2.50.70 via a maliciously crafted .m3u file. It overwrites the EIP with a JMP ESP address from Kernel32.dll and executes a Metasploit-generated shellcode to spawn calc.exe.