CVE-2012-4409

This exploit targets a stack-based buffer overflow in mcrypt <= 2.5.8 (CVE-2012-4409) by crafting a malicious encrypted file. When decrypted, it triggers arbitrary code execution via ROP chains to bypass NX and ASLR, ultimately spawning a shell.

This exploit demonstrates a stack-based buffer overflow in mcrypt <= 2.6.8 by crafting a malicious .nc file with an overly long salt value. The PoC triggers the vulnerability in the check_file_head() function during decryption, potentially leading to arbitrary code execution.