EIP-2026-119628

PRE-CVE

ASX to MP3 converter 3.1.3.7 - '.asx' Local Stack Overflow (DEP)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119628. PoCs published by max7253.

AI-analyzed exploit summary This exploit demonstrates a local stack overflow vulnerability in ASX to MP3 converter 3.1.3.7, leveraging a ROP chain to bypass DEP and execute arbitrary code (calc.exe). The payload is crafted to trigger the vulnerability via a malformed .asx file.

Description

ASX to MP3 converter 3.1.3.7 - '.asx' Local Stack Overflow (DEP)

Exploits (1)

exploitdb WORKING POC

by max7253 · pythonlocalwindows_x86-64

https://www.exploit-db.com/exploits/47468

View Code ZIP pw:eip

This exploit demonstrates a local stack overflow vulnerability in ASX to MP3 converter 3.1.3.7, leveraging a ROP chain to bypass DEP and execute arbitrary code (calc.exe). The payload is crafted to trigger the vulnerability via a malformed .asx file.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: ASX to MP3 converter 3.1.3.7

No auth needed

Prerequisites: Victim must open the malformed .asx file with the vulnerable software

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026