Rapid7 Vulnerability & Exploit Database

Green Dam URL Processing Buffer Overflow

Back to Search

Green Dam URL Processing Buffer Overflow



This module exploits a stack-based buffer overflow in Green Dam Youth Escort version 3.17 in the way it handles overly long URLs. By setting an overly long URL, an attacker can overrun a buffer and execute arbitrary code. This module uses the .NET DLL memory technique by Alexander Sotirov and Mark Dowd and should bypass DEP, NX and ASLR.


  • Trancer <mtrancer@gmail.com>




Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

msf > use exploit/windows/browser/greendam_url
msf exploit(greendam_url) > show targets
msf exploit(greendam_url) > set TARGET < target-id >
msf exploit(greendam_url) > show options
    ...show and set options...
msf exploit(greendam_url) > exploit

Time is precious, so I don’t want to do something manually that I can automate. Leveraging the Metasploit Framework when automating any task keeps us from having to re-create the wheel as we can use the existing libraries and focus our efforts where it matters.

– Jim O’Gorman | President, Offensive Security