cve/cves/2009/CVE-2009-2485.md

CVE-2009-2485

Description

Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.

POC

Reference

• http://www.exploit-db.com/exploits/9034

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/16646
• https://www.exploit-db.com/exploits/9038
• https://www.exploit-db.com/exploits/9034

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ht_mp3player_ht3_bof.rb