CVSS: 9.3EPSS: 13%CPEs: 1EXPL: 7CVE-2009-1667 – CastRipper (Windows XP SP2) - '.m3u' Local Stack Buffer Overflow
https://notcve.org/view.php?id=CVE-2009-1667
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a different vector than CVE-2009-5137. Un desbordamiento de búfer en la región stack de la memoria en CastRipper de Mini-stream versión 2.50.70, permite a los atacantes remotos ejecutar código arbitrario por medio de una entrada larga en un archivo .m3u, un vector diferente de CVE-2009-5137. • https://www.exploit-db.com/exploits/10646 https://www.exploit-db.com/exploits/8661 https://www.exploit-db.com/exploits/8662 https://www.exploit-db.com/exploits/8660 http://www.exploit-db.com/exploits/8660 http://www.exploit-db.com/exploits/8661 http://www.exploit-db.com/exploits/8662 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 46%CPEs: 1EXPL: 3CVE-2009-1646 – RM Downloader 2.7.5.400 - Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2009-1646
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file. Desbordamiento de búfer basado en pila en Mini-stream RM Downloader v3.0.0.9 permite a atacantes remotos ejecutar código de su elección a través de una URL rtsp larga en un fichero .ram. • https://www.exploit-db.com/exploits/36502 https://www.exploit-db.com/exploits/8628 http://www.securityfocus.com/bid/34860 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 56%CPEs: 1EXPL: 8CVE-2009-1642 – ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow (PoC)
https://notcve.org/view.php?id=CVE-2009-1642
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also subsequently reported in "prior to 3.1.3.7." Múltiples desbordamientos de búfer basado en pila en Mini-stream ASX to MP3 Converter 3.0.0.7 permiten que atacantes remotos ejecuten código arbitrario mediante (1) una URL rtsp larga en un archivo .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un archivo .asx. NOTA: sobre este último también se informó en "anteriores a la 3.1.3.7". • https://www.exploit-db.com/exploits/11930 https://www.exploit-db.com/exploits/11958 https://www.exploit-db.com/exploits/8630 https://www.exploit-db.com/exploits/8629 https://www.exploit-db.com/exploits/18781 https://www.exploit-db.com/exploits/11957 http://www.securityfocus.com/bid/34860 http://www.securityfocus.com/bid/34864 https://exchange.xforce.ibmcloud.com/vulnerabilities/50374 https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 54%CPEs: 1EXPL: 4CVE-2009-1641 – Mini-stream Ripper 3.0.1.1 - '.asx' 'HREF' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2009-1641
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. Múltiples desbordamientos de búfer basados en pila en Mini-stream Ripper v3.0.1.1 permiten a atacantes remotos ejecutar código de su elección a través de (1) una URL rtsp larga en un fichero .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un fichero .asx. • https://www.exploit-db.com/exploits/8632 https://www.exploit-db.com/exploits/8631 http://www.securityfocus.com/bid/34860 http://www.securityfocus.com/bid/34864 https://exchange.xforce.ibmcloud.com/vulnerabilities/50375 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 16%CPEs: 1EXPL: 4CVE-2009-1645 – Mini-stream RM-MP3 Converter 3.0.0.7 - '.asx' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2009-1645
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. Múltiples desbordamientos de búfer basados en pila en Mini-stream Easy RM-MP3 Converter v3.0.0.7 permiten a atacantes remotos ejecutar código de su elección a través de (1) una URL stsp larga en un fichero .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un fichero .asx. • https://www.exploit-db.com/exploits/8634 https://www.exploit-db.com/exploits/8633 http://www.securityfocus.com/bid/34860 http://www.securityfocus.com/bid/34864 https://exchange.xforce.ibmcloud.com/vulnerabilities/50376 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •