Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2011-5165

Description

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.

POC

Reference

- http://www.exploit-db.com/exploits/11975

- http://www.exploit-db.com/exploits/11976

- http://www.exploit-db.com/exploits/18142

- https://www.exploit-db.com/exploits/36465/

- https://www.exploit-db.com/exploits/36826/

- https://www.exploit-db.com/exploits/36827/

Github

- https://github.com/Creamy-Chicken-Soup/Exploit

- https://github.com/Creamy-Chicken-Soup/My-Writeup

- https://github.com/Creamy-Chicken-Soup/WindowsVulnAPP