CVE-2009-3709
Konae Alleycode HTML Editor 2.21 - Stack-Based Buffer Overflow via TITLE Tag
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3709. PoCs published by Dr_IDE, Rafael Sousa.
AI-analyzed exploit summary This exploit targets a local buffer overflow vulnerability in Alleycode HTML Editor 2.21 via a maliciously crafted HTML file. It leverages SEH overwrite with a P/P/R address from Kernel32.dll on Windows XP SP0 to execute a calc.exe payload.
Description
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag.
Exploits (2)
This exploit targets a local buffer overflow vulnerability in Alleycode HTML Editor 2.21 via a maliciously crafted HTML file. It leverages SEH overwrite with a P/P/R address from Kernel32.dll on Windows XP SP0 to execute a calc.exe payload.
This exploit demonstrates a buffer overflow vulnerability in AlleyCode HTML Editor version 2.21. The PoC involves creating an HTML file with an excessively long title tag, which triggers a crash when the 'Optimizer' tool is used, overwriting the EIP register with '41414141' (AAAA).