CVE-2009-1831

Related Files

Winamp MAKI Buffer Overflow

Posted Sep 11, 2012

Authored by juan vazquez, Monica Sojeong Hong | Site metasploit.com

This Metasploit module exploits a stack based buffer overflow in Winamp 5.55. The flaw exists in the gen_ff.dll and occurs while parsing a specially crafted MAKI file, where memmove is used with in a insecure way with user controlled data. To exploit the vulnerability the attacker must convince the attacker to install the generated mcvcore.maki file in the "scripts" directory of the default "Bento" skin, or generate a new skin using the crafted mcvcore.maki file. The module has been tested successfully on Windows XP SP3 and Windows 7 SP1.

tags | exploit, overflow

systems | windows

advisories | CVE-2009-1831, OSVDB-54902

SHA-256 | 5adb71bf40d8f22c0a8d648e7bf1a6e8306425ec34b9602f5ae6bdf26e12970b

Download | Favorite | View