CVE-2009-1807
EXPLOITED IN THE WILDBaofeng Storm < 3.09.04.17 - Remote Code Execution via Config.dll SetAttributeValue
Title source: llmExploitation Summary
CVE-2009-1807 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including etirah.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the BaoFeng config.dll ActiveX control via the SetAttributeValue method. It uses a heap spray technique to achieve remote code execution by overwriting memory with shellcode.
Description
Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009.
Exploits (1)
This exploit targets a buffer overflow vulnerability in the BaoFeng config.dll ActiveX control via the SetAttributeValue method. It uses a heap spray technique to achieve remote code execution by overwriting memory with shellcode.