Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-20002.
PoCs published by Molotov, hack4love, Molotov, dookie, jduck, including Metasploit module exploits/windows/fileformat/millenium_mp3_pls.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Millenium MP3 Studio 2.0 by crafting a malicious .pls playlist file. The payload includes a SEH overwrite and shellcode to achieve remote code execution.
Description
Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls playlist files. The application fails to properly validate the length of the File1 field within the playlist, allowing an attacker to craft a malicious .pls file that overwrites the Structured Exception Handler (SEH) and executes arbitrary code. Exploitation requires the victim to open the file locally, though remote execution may be possible if the .pls extension is registered to the application and opened via a browser.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Millenium MP3 Studio 2.0 by crafting a malicious .pls playlist file. The payload includes a SEH overwrite and shellcode to achieve remote code execution.
This exploit leverages a buffer overflow vulnerability in Millenium MP3 Studio by crafting malicious PLF, MPF, and M3U files with a long string of 'A's to overwrite the SEH handler, followed by a NOP sled and shellcode for arbitrary code execution.
This Metasploit module exploits a stack-based buffer overflow in Millenium MP3 Studio 2.0 via a maliciously crafted PLS file. It leverages SEH overwrites and a jump-back shellcode technique to achieve remote code execution.
References (6)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N