A critical local buffer overflow vulnerability in Mini-stream Software RM Downloader 2.50.60 allows attackers to achieve remote code execution.

This is a classic buffer overflow (CWE-120) triggered by providing a malicious input to the Load parameter. The vulnerability allows an attacker to overwrite memory and bypass security protections, such as Data Execution Prevention, using an egg hunter technique to execute arbitrary commands.

Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary code with the privileges of the user running the application. This could lead to full system compromise, unauthorized access to sensitive data, or the installation of malicious software. Given the CVSS score of 8.4, this poses a significant risk to the integrity and confidentiality of the host machine.

Immediate Action: As no official patch is available for this legacy software, users should immediately discontinue the use of RM Downloader. If the software is required for business operations, isolate the host from the network and restrict access to authorized personnel only.

Proactive Monitoring: Monitor system logs for unusual process execution, particularly the spawning of system tools such as calc.exe or shell processes initiated by the RM Downloader application.

Compensating Controls: Ensure that modern operating system security features, such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR), are enabled and strictly enforced to hinder the effectiveness of memory corruption exploits.

Public Exploit Available: Yes, a published proof-of-concept exploit is available via Exploit-DB (EDB-ID: 48628).

Due to the nature of this vulnerability and the lack of vendor-provided patches, the risk remains persistent. Organizations should prioritize the removal of this software from all endpoints. If removal is not feasible, implement strict access controls and network isolation to minimize the attack surface until the application can be replaced with a secure alternative.