CVE-2009-5137
Mini-stream CastRipper 2.50.70 - Stack-based Buffer Overflow via Long URL in PLS Playlist
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-5137. PoCs published by zAx.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in CastRipper 2.50.70 via a malformed .pls file. It uses a universal return address and shellcode to execute arbitrary commands (e.g., calc.exe) when the file is parsed.
Description
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long URL in the [playlist] section in a .pls file, a different vector than CVE-2009-1667.
Exploits (1)
This exploit targets a stack overflow vulnerability in CastRipper 2.50.70 via a malformed .pls file. It uses a universal return address and shellcode to execute arbitrary commands (e.g., calc.exe) when the file is parsed.