CVE-2009-2485
HT-MP3Player 1.0 - Stack-Based Buffer Overflow via Long String in .ht3 File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-2485.
PoCs published by Metasploit, His0k4, hack4love, including Metasploit module exploits/windows/fileformat/ht_mp3player_ht3_bof.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in HT-MP3Player 1.0 by crafting a malicious .HT3 file. It leverages SEH overwrites and a custom payload to achieve remote code execution.
Description
Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.
Exploits (4)
This exploit targets a stack buffer overflow in HT-MP3Player 1.0 by crafting a malicious .HT3 file. It leverages SEH overwrites and a custom payload to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in HT-MP3Player 1.0 via a malformed .ht3 file. It leverages SEH overwrite with a PexAlphaNum-encoded calc.exe payload.
This exploit targets a local buffer overflow vulnerability in HT-MP3Player 1.0 via a maliciously crafted .ht3 file. It leverages SEH overwrite with a custom payload to achieve arbitrary code execution.
This Metasploit module exploits a stack buffer overflow in HT-MP3Player 1.0 via a crafted .HT3 file. It leverages SEH overwrite and alphanumeric encoding to achieve remote code execution.