Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long string in a WAX file.
Vendor
mini-stream vulnerabilities
17 published CVES affecting mini-stream, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 17
- Critical
- 0
- High
- 17
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- ripper 3
- rm-mp3 converter 3
- castripper 2
- rm downloader 2
- asx to mp3 converter 1
- easy rm to mp3 converter 1
- easy rm-mp3 converter 1
- mini-stream rm downloader 1
- mini-stream to mp3 converter 1
- shadow stream recorder 1
- wm downloader 1
Latest mini-stream CVEs
Newest publication first
-
HighCVSS 7.5 Public exploit PoC
-
HighCVSS 7.5 Public exploit
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long URL in the [playlist] section in a .pls file, a different vector than CVE-2009-1667.
-
HighCVSS 9.3 EPSS 32.5% Framework module Public exploit
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.
-
HighCVSS 9.3 EPSS 30.9% Framework module Public exploit
Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file.
-
HighCVSS 9.3 Public exploit
Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long string in a .smi file.
-
HighCVSS 9.3 Public exploit
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a different vector than CVE-2009-5137.
-
HighCVSS 9.3 Public exploit
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file.
-
HighCVSS 9.3 Public exploit
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.
-
HighCVSS 9.3 Public exploit PoC
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also subsequ...
-
HighCVSS 9.3 EPSS 30.9% Framework module Public exploit
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.
-
HighCVSS 9.3 Public exploit PoC
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
-
HighCVSS 9.3 Public exploit PoC
Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
-
HighCVSS 9.3 Public exploit PoC
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
-
HighCVSS 9.3 Public exploit PoC
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
-
HighCVSS 9.3 Public exploit PoC
Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
-
HighCVSS 9.3 Public exploit PoC
Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.
-
HighCVSS 9.3 Public exploit PoC
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.