CVE-2010-2439
MoreAmp - Stack-based Buffer Overflow via Long Line in Song List File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-2439. PoCs published by Madjix, Sid3^effects.
AI-analyzed exploit summary This is a functional Metasploit module exploiting a SEH-based buffer overflow in MoreAmp 0.1.25 Beta via a crafted .m3u file. It leverages a known return address (0x7C86467B) to achieve arbitrary code execution on Windows XP SP3 Fr.
Description
Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list (.maf file).
Exploits (3)
This is a functional Metasploit module exploiting a SEH-based buffer overflow in MoreAmp 0.1.25 Beta via a crafted .m3u file. It leverages a known return address (0x7C86467B) to achieve arbitrary code execution on Windows XP SP3 Fr.
This exploit demonstrates a local stack-based buffer overflow in MoreAmp's .maf file parser, leveraging SEH overwrite with a jump to shellcode. The payload is crafted to trigger arbitrary code execution on Windows XP SP3 FR.
This exploit generates a malformed .maf file with an oversized buffer (90,000 'A' characters) to trigger a buffer overflow in MoreAmp when the file is loaded via the 'Open Song List' feature. The PoC is designed for Windows XP SP3 and demonstrates a DoS condition, though it could potentially lead to arbitrary code execution with further refinement.