CVE-2009-3214
Photodex ProShow Gold 4.0.2549 - Stack-Based Buffer Overflow via Crafted Slideshow Project File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-3214.
PoCs published by Metasploit, hack4love, corelanc0d3r, including Metasploit module exploits/windows/fileformat/proshow_cellimage_bof.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in ProShow Gold v4.0.2549 by crafting a malicious PSH file. It leverages SEH overwrites and a custom jump-back shellcode to achieve remote code execution when the victim opens the file.
Description
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.
Exploits (4)
This exploit targets a stack-based buffer overflow in ProShow Gold v4.0.2549 by crafting a malicious PSH file. It leverages SEH overwrites and a custom jump-back shellcode to achieve remote code execution when the victim opens the file.
This exploit targets a buffer overflow vulnerability in ProShow Producer/Gold v4.0.2549 via a maliciously crafted .psh file. It leverages SEH overwrite and shellcode execution to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in ProShow Gold 4.0 via a maliciously crafted .psh file. It leverages SEH overwrites and includes a Metasploit-generated shellcode payload to execute arbitrary code (e.g., calc.exe).
This Metasploit module exploits a stack-based buffer overflow in ProShow Gold v4.0.2549 via a maliciously crafted PSH file. It leverages SEH overwrites and a jump-back payload to achieve remote code execution when the victim opens the file.