Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.

1. 2009-12-25 First public exploit (Metasploit exploit/windows/misc/mini_stream)
2. 2011-12-25 Published

32.46% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/misc/mini_stream Mini-Stream 3.0.1.1 Buffer Overflow metasploit exploit, normal rank, 2009-12-25
• EDB-18082 Mini-stream Ripper 3.0.1.1 - Local Buffer Overflow (Metasploit) (3) local, 2011-11-04
• EDB-10782 Mini-stream Ripper 3.0.1.1 - '.pls' Universal Buffer Overflow local, 2009-12-29
• EDB-10747 Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow local, 2009-12-27
• EDB-10745 Mini-stream Ripper 3.0.1.1 - '.pls' Universal Local Buffer Overflow local, 2009-12-27

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• exploit-db.com /exploits/10782

  exploit

• exploit-db.com /exploits/18082

  exploit

• exploit-db.com /exploits/10745

  exploit

• exploit-db.com /exploits/10747

  exploit

• osvdb.org /61341

  vdb-entry

• CVE List CVE-2009-5109
• NVD CVE-2009-5109

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.