CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6251

CVE-2006-6251 is a stack-based buffer overflow in VUPlayer (versions up to 2.49/2.44 and earlier) triggered by a crafted M3U playlist, allowing remote code execution when a user opens the file. Public exploit materials exist (Metasploit module, PoC scripts, and CERT/SEC advisories), indicating re...

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow (Metasploit)

require 'msf/core' module Msf class Exploits::Windows::Browser::VUPlayerM3U 'VUPlayer %q This module exploits a stack overflow in VUPlayer 2.44 and lower. The vulnerability is caused due to a boundary error within the parsing of playlists containing an overly entries. After overwriting EIP with o...