CVE-2009-1330 PoC — Mini-stream Easy RM to MP3 Converter播放列表文件处理栈溢出漏洞

Source

https://github.com/exploitwritter/CVE-2009-1330_EasyRMToMp3Converter

Associated Vulnerability

Title:Mini-stream Easy RM to MP3 Converter播放列表文件处理栈溢出漏洞 (CVE-2009-1330)
Description:Mini-stream是一家专业的音频抓轨和格式转换软件厂商。 Mini-stream Easy RM to MP3 Converter音频转换软件没有正确地处理.pls和.m3u播放列表文件。如果用户受骗加载了恶意播放列表文件的话，就可能触发栈溢出，导致执行任意代码。

Description

Easy RM to MP3 Converter  es un software que sufre de una vulnerabiliad de desbordamiento de buffer basada en la pila o StackBufferOverflow lo cual puede permite a los atacantes remotos ejecutar código arbitrario a través de un nombre de archivo largo en un archivo de lista de reproducción (.pls)

File Snapshot


 [4.0K]  /data/pocs/3306c7e737cfc7ea9b482e860086283150cbb340
├── [2.8M]  707414955696c57b71c7f160c720bed5-EasyRMtoMP3Converter.exe
├── [1.8K]  CVE-2009-1330_EasyRMtoMP3Converter2.7.3.700_PUSH_ESP.py
└── [1.7K]  skeleton_create_file.py

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!