CVE-2009-1642

HighPublished

Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL...

Published: May 15, 2009
Updated: Aug 7, 2024
Assigning CNA: mitre
Evidence observed: May 7, 2009

Primary CVSS

9.3/ 10High

nvd · CVSS 2.0

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS probability estimate

6.9%

Low · next 30 days

Percentile: 93.9%
Model date: Oct 14, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also subsequently reported in "prior to 3.1.3.7."

Sources

Mini-stream ASX to MP3 Converter 3.0.0.7 - '.RAM' Local Buffer OverflowExploit
G4N0K · windows · May 7, 2009
Mini-stream ASX to MP3 Converter 3.0.0.7 - '.asx HREF' Local Buffer OverflowExploit
G4N0K · windows · May 7, 2009
ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow (PoC)Exploit
mat · windows · Mar 29, 2010
Shadow Stream Recorder 3.0.1.7 - '.asx' Local Buffer OverflowExploit
b0telh0 · windows · Mar 30, 2010
ASX to MP3 Converter 3.0.0.100 - Local Stack OverflowExploit
Hazem mofeed · windows · Mar 30, 2010
Shadow Stream Recorder 3.0.1.7 - Local Buffer Overflow (Metasploit)Exploit
Metasploit · windows · Apr 25, 2012

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.