CVE-2012-4758

CVE-2012-4758 concerns CyberLink PowerProducer 5.5.3.2325, where multiple untrusted search path vulnerabilities allow local users to elevate privileges via Trojan horse files (mfc71loc.dll or mfc71enu.dll) placed in the current working directory, demonstrated by a directory containing a .ppp or ....

CVE-2012-4757

CVE-2012-4757 describes multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 that allow local users to gain privileges by placing (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated via a directory containing a .sta or .stp file. ...

CVE-2012-4758

Multiple untrusted search path vulnerabilities in CyberLink PowerProducer 5.5.3.2325 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .ppp or .rdf file. NOTE: the provenan...

CyberLink Power2Go Stack Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'CyberLink Power2Go name Attribute p2g Stack Buffer Overflow Exploit', 'Description' = %q This module exploits a stack buffer...

CyberLink Power2Go - name Attribute (p2g) Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'CyberLink Power2Go name attribute p2g...

CyberLink Power2Go name attribute (p2g) Stack Buffer Overflow Exploit

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

CyberLink (Multiple Products) - File Project Handling Stack Buffer Overflow (PoC)

CyberLink Multiple Products - File Project Handling Stack Buffer Overflow PoC !/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLi...

CyberLink (Multiple Products) - File Project Handling Stack Buffer Overflow (PoC)

!/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLink Power2Go 7 build 196 CyberLink Power2Go 8 build 1031 CyberLink WaveEditor 2...

CyberLink Stack Buffer Overflow

!/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLink Power2Go 7 build 196 CyberLink Power2Go 8 build 1031 CyberLink WaveEditor 2...

CyberLink Multiple Products File Project Handling Stack Buffer Overflow

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLink Power2Go 7 build 196...

Power2Go buffer overflow vulnerability

Overview Power2Go 8 contains a buffer overflow in the handling of project .p2g files, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description According to CyberLink's website, "Power2Go 8 features all the tools you need to easily copy all...

CyberLink Power2Go name Attribute (p2g) Stack Buffer Overflow Exploit

This module exploits a stack buffer overflow in CyberLink Power2Go version 8.x The vulnerability is triggered when opening a malformed p2g file containing an overly long string in the 'name' attribute of the file element. This results in overwriting a structured exception handler record. Module...

PowerDVD.exe 5.00.1107 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ============================================ PowerDVD.exe 5.00.1107 DLL Hijacking Exploit ============================================ / Author: Inj3cti0n P4ck3t e-mail: email protected Date: 18/10/2010 Name BUG: PowerDVD 5.00.1107 DLL...

CyberLink PowerDVD PlayList File Handling Stack Overflow

CyberLink PowerDVD is a commercial video and audio player for Microsoft Windows and Linux. It enables viewing High-definition video and DVD-Video movies on the user's PC. The player can also be used to play videos and audio/music files in other formats encoded with different codecs, for instance...

KLA10132 DoS vulnerability in Cyberlink PowerDVD

A buffer overflow was found in Cyberlink PowerDVD. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories Blog post Related products Cyberlink-PowerDVD CVE list Solution Upda...

powerdvd_bof.pl.txt

!/usr/bin/perl CyberLink PowerDVD ./evillist.m3u"; or .pls print m3u "$buffer"; print "\n-- Evil Playlist created... Have fun!\n"; July, 2008...

CyberLink PowerDVD <= 8.0 Crafted PLS/M3U Playlist File BoF Vulnerability

Summary CyberLink PowerDVD is a commercial media player for Microsoft Windows and Linux. Several editions of the software are sold including "Ultra", "Deluxe" and "Standard". All editions support the viewing of DVD but only the Ultra edition supports Blu-ray playback. Description PowerDVD is pron...

Directory traversal

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

CVE-2007-5219

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the CreateNewFile method...

CVE-2007-5219

The CVE-2007-5219 issue affects CyberLink PowerDVD 7.0 via the CLAVSetting.DLL 1.00.1829 CLAVSetting.CLSetting.1 ActiveX control. The vulnerability is a directory traversal in CreateNewFile that allows remote attackers to create or overwrite arbitrary files by supplying a .. sequence in the argum...