CVE-2009-1642

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Shadow Stream Recorder 3.0.1.7 - Local Buffer Overflow (Metasploit)2012-04-25 · local · windows · Verified
• ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow2010-03-30 · local · windows · Verified
• Shadow Stream Recorder 3.0.1.7 - '.asx' Local Buffer Overflow2010-03-30 · local · windows · Verified
• ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow (PoC)2010-03-29 · dos · windows · Verified
• Mini-stream ASX to MP3 Converter 3.0.0.7 - '.asx HREF' Local Buffer Overflow2009-05-07 · local · windows · Verified
• Mini-stream ASX to MP3 Converter 3.0.0.7 - '.RAM' Local Buffer Overflow2009-05-07 · local · windows · Verified

Impact

Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also subsequently reported in "prior to 3.1.3.7."

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.securityfocus.com/bid/34860
• http://www.securityfocus.com/bid/34864
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50374
• https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html
• https://www.exploit-db.com/exploits/8629
• https://www.exploit-db.com/exploits/8630
• http://www.securityfocus.com/bid/34860
• http://www.securityfocus.com/bid/34864
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50374
• https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html
• https://www.exploit-db.com/exploits/8629
• https://www.exploit-db.com/exploits/8630