VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit 음, CVE 번호가 CVE-2008-4654인 오래된 취약점입니다. 이 취약점은 modules/demux/ty.c의 1650번째 줄에서 Out of Memory로 인해 발생합니다. streamReadpdemux-s, mstbuf, 8 + imapsize; 다른 웹사이트에서 EXP를 다운로드했을 때, 내 Windows 7 Ultimate x64에서 제대로 작동하지 않는 것을 발견했습니다. 그래서 리턴 주소를 0x68f0cfad에서 0x6a314b52로 변경했더니 작동합니다! 이전:...

VideoLAN VLC Media Player 0.9.4 - TiVo Buffer Overflow (Metasploit)

$Id: videolantivo.rb 11701 2011-02-02 21:47:02Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

VideoLAN VLC TiVo Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'VideoLAN VLC TiVo...

CVE-2008-4654

Stack-based buffer overflow in the parsemaster function in the Ty demux plugin modules/demux/ty.c in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value...

VideoLAN VLC TiVo Buffer Overflow

This module exploits a buffer overflow in VideoLAN VLC 0.9.4. By creating a malicious TY file, a remote attacker could overflow a buffer and execute arbitrary code. Module Options msf use exploit/windows/fileformat/videolan/tivo msf undefinedtivo show actions ...actions... msf undefinedtivo set...

CVE-2008-4654

Stack-based buffer overflow in the parsemaster function in the Ty demux plugin modules/demux/ty.c in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value...

CVE-2008-4654

CVE-2008-4654 affects VideoLAN VLC media player (versions 0.9.0–0.9.4) via a stack-based buffer overflow in the Ty TiVo demux parse path (parse_master in ty.c) that can be triggered by a crafted TiVo TY header. The vulnerability allows remote attackers to execute arbitrary code with the privilege...