CVE-2015-7243
Boxoft WAV to MP3 Converter - Buffer Overflow via Crafted WAV File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2015-7243.
PoCs published by Metasploit, Robbie Corley, Robbie Corley, Shelby Pace, including Metasploit module exploits/windows/fileformat/boxoft_wav_to_mp3.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter v1.1 by crafting a malicious WAV file. The exploit leverages a P/P/R SEH overwrite to execute arbitrary shellcode.
Description
Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted WAV file.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter v1.1 by crafting a malicious WAV file. The exploit leverages a P/P/R SEH overwrite to execute arbitrary shellcode.
This exploit leverages a buffer overflow in Boxoft WAV to MP3 Converter by crafting a malicious .wav file with a payload exceeding 4000 characters, triggering an SEH bypass to execute arbitrary shellcode (MessageBox pop-up).
This Metasploit module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter v1.1 by crafting a malicious WAV file that triggers an SEH overwrite, leading to arbitrary code execution.