CVE-2014-9448
Mini-stream RM-MP3 Converter <3.1.2.1.2010.03.30 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2014-9448. PoCs published by SkY-NeT SySteMs, Muhamad Fadzil Ramli, ZoRLu Bugrahan.
AI-analyzed exploit summary This Python script generates a malicious .m3u file that exploits a local buffer overflow vulnerability in Mini-stream RM-MP3 Converter 3.1.2.2. The exploit uses a JMP ESP instruction to redirect execution to a shellcode payload, achieving arbitrary code execution.
Description
Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long string in a WAX file.
Exploits (3)
This Python script generates a malicious .m3u file that exploits a local buffer overflow vulnerability in Mini-stream RM-MP3 Converter 3.1.2.2. The exploit uses a JMP ESP instruction to redirect execution to a shellcode payload, achieving arbitrary code execution.
This Ruby script exploits a SEH-based buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 via a maliciously crafted .wax file. It uses a standard SEH overwrite technique with a NOP sled and shellcode to achieve remote code execution (RCE).
This exploit targets a buffer overflow vulnerability in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 via a maliciously crafted .wax file. It overwrites the EIP register with a JMP ESP address and executes shellcode to spawn calc.exe.