CVE-2011-5165
Free MP3 CD Ripper <= 2.6 - Stack-based Buffer Overflow via Crafted WAV File
Title source: llmExploitation Summary
EIP tracks 9 public exploits for CVE-2011-5165.
PoCs published by naxxo, ThreatActor, TUNISIAN CYBER, including Metasploit module exploits/windows/fileformat/free_mp3_ripper_wav.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in FMCRSetup.exe, leveraging a ROP chain and DEP bypass to execute arbitrary shellcode (calc.exe). It uses a structured SEH overwrite and ROP gadgets to achieve reliable code execution.
Description
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.
Exploits (9)
This exploit targets a buffer overflow vulnerability in FMCRSetup.exe, leveraging a ROP chain and DEP bypass to execute arbitrary shellcode (calc.exe). It uses a structured SEH overwrite and ROP gadgets to achieve reliable code execution.
This exploit targets a SEH-based buffer overflow vulnerability in an unspecified software, using a crafted .wav file to deliver a reverse shell payload. It bypasses SEH with a short jump and leverages a POP ESI instruction from ogg.dll for reliable exploitation.
This exploit demonstrates a local buffer overflow in Free MP3 CD Ripper by crafting a malicious .wav file with a payload that overwrites the EIP and executes shellcode to spawn calc.exe. It targets specific return addresses on Windows XP/7.
This exploit targets a stack-based buffer overflow in Free MP3 CD Ripper 1.1 via a malicious WAV file. It leverages SEH overwrites and a jump-back technique to execute arbitrary payloads.
This exploit demonstrates a local buffer overflow in Free MP3 CD Ripper 1.1 by crafting a malicious .wav file. The payload includes a NOP sled and shellcode to achieve arbitrary code execution when the file is processed by the vulnerable software.
This exploit targets Free MP3 CD Ripper 2.6 via a buffer overflow in the WAV to MP3 conversion feature. It uses a JMP ESP instruction and shellcode to execute arbitrary code (e.g., opening Notepad).
This is a stack-based buffer overflow exploit for Free MP3 CD Ripper 2.6, leveraging an egghunter and shellcode to achieve remote code execution. The exploit crafts a malicious WAV file to trigger the vulnerability.
This exploit targets a buffer overflow vulnerability in Free MP3 CD Ripper 2.6 by generating a malicious .wav file. The payload consists of a large buffer of 'A's followed by a JMP ESP instruction and a placeholder for shellcode.
This Metasploit module exploits a stack-based buffer overflow in Free MP3 CD Ripper 1.1 by crafting a malicious WAV file. It leverages SEH overwrites and a p/p/r address in libFLAC.dll to achieve remote code execution.