{"uuid": "0fad2def-4a23-406a-b754-e912b844973d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-1612", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/baofeng_storm_onbeforevideodownload.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow in BaoFeng's Storm media Player ActiveX\\n          control. Versions of mps.dll including 3.9.4.27 and lower are affected. When passing\\n          an overly long string to the method \\\"OnBeforeVideoDownload\\\" an attacker can execute\\n          arbitrary code.\", \"disclosure_date\": \"2009-04-30\", \"fullname\": \"exploit/windows/browser/baofeng_storm_onbeforevideodownload\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"BaoFeng Storm mps.dll ActiveX OnBeforeVideoDownload Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/baofeng_storm_onbeforevideodownload.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/baofeng_storm_onbeforevideodownload\", \"references\": [\"CVE-2009-1612\", \"OSVDB-54169\", \"BID-34789\", \"EDB-8579\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP SP0-SP3 / Windows Vista / IE 6.0 SP0-SP2 / IE 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:00.230714Z"}