critical9.3Public exploit code
CVE-2009-1612
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BaoFeng Storm - 'mps.dll' ActiveX OnBeforeVideoDownload Buffer Overflow (Metasploit)2010-04-30 · remote · windows · Verified
- BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow2009-04-30 · remote · windows · Verified
Impact
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Baofeng | Storm | Versions 2.7.9_8, 2.7.9_10, 2.8, 2.9, 3.9.3_25, 3.9.3_30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/34944
- http://www.cisrt.org/enblog/read.php?245
- http://www.securityfocus.com/bid/34789
- https://www.exploit-db.com/exploits/8579
- http://secunia.com/advisories/34944
- http://www.cisrt.org/enblog/read.php?245
- http://www.securityfocus.com/bid/34789
- https://www.exploit-db.com/exploits/8579