CVE-2009-1831
Nullsoft Winamp < 5.552 - Remote Code Execution via Crafted MAKI File
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2009-1831.
PoCs published by Metasploit, n00b, His0k4, including Metasploit module exploits/windows/fileformat/winamp_maki_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Winamp 5.55 via a crafted MAKI file, leveraging an insecure memmove operation in gen_ff.dll. It generates a malicious mcvcore.maki file that triggers the vulnerability when parsed by Winamp.
Description
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
Exploits (6)
This Metasploit module exploits a stack-based buffer overflow in Winamp 5.55 via a crafted MAKI file, leveraging an insecure memmove operation in gen_ff.dll. It generates a malicious mcvcore.maki file that triggers the vulnerability when parsed by Winamp.
This exploit targets an integer overflow vulnerability in Winamp 5.551's MAKI parsing functionality. It triggers an exception handler overwrite to execute arbitrary shellcode, demonstrated with a calc.exe payload.
This exploit targets a MAKI script parsing vulnerability in Winamp <= 5.55, leveraging a SEH overwrite to achieve remote code execution. The payload is embedded in a crafted MAKI file, designed to trigger the vulnerability when parsed by Winamp.
This exploit targets a universal integer overflow vulnerability in Winamp <= 5.55 via a malicious MAKI script. It crafts a file 'mcvcore.maki' with a header, exploit payload, and shellcode to achieve remote code execution when placed in the Winamp skins directory.
This exploit triggers an integer overflow in Winamp 5.551 by crafting a malicious MAKI file, leading to a buffer overflow and potential control over exception handlers. The PoC generates a file that, when parsed, overwrites the SEH record.
This Metasploit module exploits a stack-based buffer overflow in Winamp 5.55 via a crafted MAKI file, leveraging an insecure memmove operation in gen_ff.dll. It generates a malicious mcvcore.maki file to achieve remote code execution when parsed by the vulnerable software.