critical9.3Public exploit code
CVE-2009-2364
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in a .plf file and (2) a long string in th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)2010-11-18 · local · windows · Verified
- MP3-Nator 2.0 - Local Buffer Overflow (SEH)2010-11-11 · local · windows · Verified
- MP3-Nator 2.0 - '.plf' Universal Buffer Overflow (SEH)2009-07-01 · local · windows · Verified
Impact
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in a .plf file and (2) a long string in the listdata.dat file, possibly related to a track entry.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mp3-Nator | Mp3-Nator | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/9060
- http://www.exploit-db.com/exploits/9136
- http://www.vupen.com/english/advisories/2009/1765
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51486
- http://www.exploit-db.com/exploits/9060
- http://www.exploit-db.com/exploits/9136
- http://www.vupen.com/english/advisories/2009/1765
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51486