CVE-2020-37000
CRITICALFree MP3 CD Ripper 2.8 - Remote Code Execution via Malicious WAV File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37000. PoCs published by Eduard Palisek.
AI-analyzed exploit summary This exploit leverages a stack buffer overflow in Free MP3 CD Ripper 2.8 via a malformed WAV file, using SEH overwrites and an egghunter to achieve remote code execution. The payload is a bind shell on TCP port 9001, generated with msfvenom.
Description
Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to achieve remote code execution on vulnerable Windows systems.
Exploits (1)
This exploit leverages a stack buffer overflow in Free MP3 CD Ripper 2.8 via a malformed WAV file, using SEH overwrites and an egghunter to achieve remote code execution. The payload is a bind shell on TCP port 9001, generated with msfvenom.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H