Published: 17/04/2009 Updated: 29/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 960

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote malicious users to execute arbitrary code via a long URI in a playlist (.m3u) file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mini-stream wm downloader 3.0.0.9

/* # WM Downloader Version 3009 m3u Universal Stack Overflow Exploit # Disoverd By Cyber-Zone # Exploited By Stack # Thnx : HOD The Best Metasploiter */ #include <stringh> #include <stdioh> #include <stdlibh> #define OFFSET 26117 char header1[]="\x23\x45\x58\x54\x4D\x33\x55\r\n"; char header2[]=""; char scode[ ...

#!/usr/bin/perl # # # ************************************************************************ # * ASX to MP3 Converter (M3U File) Local Stack Overflow POC * # ************************************************************************ # # Found By : Cyber-Zone (ABDELKHALEK) # E-mail : Paradis_des_fous@hotmailfr # Home : WwWIQ-TYC ...

#!/usr/bin/perl # # # ************************************************************* # * WM Downloader (M3U File) Local Stack Overflow POC * # ************************************************************* # # Found By : Cyber-Zone (ABDELKHALEK) # E-mail : Paradis_des_fous@hotmailfr # Home : WwWIQ-TYCoM ; WwWNo-ExploitCoM # Greetz ...

#!/usr/bin/perl # # # ********************************************************* # * RM Downloader (M3U File) Local Stack Overflow POC * # ********************************************************* # # Found By : Cyber-Zone (ABDELKHALEK) # E-mail : Paradis_des_fous@hotmailfr # Home : WwWIQ-TYCoM ; WwWNo-ExploitCoM # Greetz : Hussin X ...

#!/usr/bin/perl # # # ************************************************************************ # * Mini-stream RM-MP3 Converter (M3U File) Local Stack Overflow POC * # ************************************************************************ # # Found By : Cyber-Zone (ABDELKHALEK) # E-mail : Paradis_des_fous@hotmailfr # Home : WwWIQ-TYC ...

#!/usr/bin/perl # # # ************************************************************* # * Mini-stream Ripper (M3U File) Local Stack Overflow POC * # ************************************************************* # # Found By : Cyber-Zone (ABDELKHALEK) # E-mail : Paradis_des_fous@hotmailfr # Home : WwWIQ-TYCoM ; WwWNo-ExploitCoM # Greetz ...

CWE-119 http://www.securityfocus.com/bid/34494 http://secunia.com/advisories/34674 https://exchange.xforce.ibmcloud.com/vulnerabilities/49842 https://www.exploit-db.com/exploits/8411 https://www.exploit-db.com/exploits/8403 https://nvd.nist.gov https://www.exploit-db.com/exploits/8411/

CVE-2009-1327

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect