CVE-2011-10016
CRITICALReal Networks Netzip Classic 7.5.1.86 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-10016.
PoCs published by Metasploit, C4SS!0 G0M3S, including Metasploit module exploits/windows/fileformat/real_networks_netzip_bof.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Real Networks Netzip Classic 7.5.1.86 by crafting a malicious ZIP file that triggers arbitrary code execution when parsed. The payload is encoded and delivered via a specially formatted ZIP archive.
Description
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation allows arbitrary code execution under the context of the victim user when the ZIP file is opened.
Exploits (3)
This exploit targets a stack-based buffer overflow in Real Networks Netzip Classic 7.5.1.86 by crafting a malicious ZIP file that triggers arbitrary code execution when parsed. The payload is encoded and delivered via a specially formatted ZIP archive.
This exploit demonstrates a buffer overflow vulnerability in NetZip Classic 7.5.1.86 by crafting a malicious ZIP file that triggers an SEH overwrite, leading to arbitrary code execution (e.g., launching calc.exe). The payload includes a structured ZIP header, a buffer overflow with SEH manipulation, and shellcode.
This Metasploit module exploits a stack-based buffer overflow in Real Networks Netzip Classic 7.5.1.86 by crafting a malicious ZIP file that triggers arbitrary code execution when opened by the victim.
References (5)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H