VUPlayer 2.49 .wax File Overflow Exploit

!/usr/bin/perl -w Author : Houssamix Download : http://vuplayer.com/files/vuplayersetup.exe tested in windows pro Sp 2 french -- Viva Gazza -- Viva Palestine -- print "===================================================================== \n"; print "Author : Houssamix \n"; print...

VUPlayer 2.49 - .wax Local Buffer Overflow

VUPlayer 2.49 - .wax Local Buffer Overflow !/usr/bin/perl -w Author : Houssamix Download : http://vuplayer.com/files/vuplayersetup.exe tested in windows pro Sp 2 french -- Viva Gazza -- Viva Palestine -- print "===================================================================== \n"; print "Auth...

VUPlayer 2.49 (.wax File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= VUPlayer 2.49 .wax File Local Buffer Overflow Exploit ======================================================= !/usr/bin/perl -w Author : Houssamix Download :...

VUPlayer 2.49 - '.wax' Local Buffer Overflow

!/usr/bin/perl -w Author : Houssamix Download : http://vuplayer.com/files/vuplayersetup.exe tested in windows pro Sp 2 french -- Viva Gazza -- Viva Palestine -- print "===================================================================== \n"; print "Author : Houssamix \n"; print...

vuplayer_bof.pl.txt

!/usr/bin/perl Title: VUPlayer 2.49 M3U Playlist File Remote Buffer Overflow Exploit Summary: VUPlayer is a freeware multi-format audio player for Windows Product web page: http://www.vuplayer.com/vuplayer.php Desc: VUPlayer 2.49 suffers from buffer overflow vulnerability that can be exploited...

VUPlayer 2.49 M3U Playlist File Remote Buffer Overflow Exploit

Summary VUPlayer is a freeware multi-format audio player for Windows. Description VUPlayer 2.49 suffers from a buffer overflow vulnerability that can be exploited remotely using user interaction and/or crafting. It fails to perform adequate boundry checking of the user input file .m3u playlist,...

VUPlayer malformed playlist buffer overflow

Overview VUPlayer fails to properly handle malformed playlists. This vulnerability may allow a remote attacker to execute arbitrary code. Description VUPlayer is a freeware audio player for the Microsoft Windows platform. It can play various types of media files, such as MP3s. A Playlist .PLS or...

VUPlayer M3U/PLS播放列表解析缓冲区溢出漏洞

VUPlayer是Windows平台下的一款免费音频播放器，支持多种格式。 VUPlayer在处理畸形的M3U及PLS文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 VUPlayer在解析包含有超长文件名（大于1012字节）的M3U和PLS播放列表文件时存在栈溢出漏洞。如果用户受骗加载了恶意的播放列表文件的话就会触发这个漏洞，导致执行任意指令。 VUPlayer VUPlayer 2.44 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vuplayer.com/vuplayer.php...

CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6251

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an "M3U UNC Name" attack...

CVE-2006-6251

CVE-2006-6251 is a stack-based buffer overflow in VUPlayer (versions up to 2.49/2.44 and earlier) triggered by a crafted M3U playlist, allowing remote code execution when a user opens the file. Public exploit materials exist (Metasploit module, PoC scripts, and CERT/SEC advisories), indicating re...

VUPlayer buffer overflow

Buffer overflow on .M3U files parsing...

VUPlayer <= 2.44 (M3U UNC Name) Buffer Overflow Exploit (c)

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

VUPlayer <= 2.44 (M3U UNC Name) Buffer Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Browser::VUPlayerM3U Msf::Exploit::Remote include Exploit::Remote::HttpServer::Html def initializeinfo = superupdateinfoinfo, 'Name' = 'VUPlayer = 2.44 M3U UNC Name Buffer Overflow', 'Description' = %q This...

VUPlayer <= 2.44 (M3U UNC Name) Buffer Overflow Exploit (c)

Exploit for unknown platform in category local exploits =========================================================== VUPlayer | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going...

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow (Metasploit)

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow Metasploit require 'msf/core' module Msf class Exploits::Windows::Browser::VUPlayerM3U 'VUPlayer %q This module exploits a stack overflow in VUPlayer 2.44 and lower. The vulnerability is caused due to a boundary error within the parsing of playlists...

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow (Metasploit)

require 'msf/core' module Msf class Exploits::Windows::Browser::VUPlayerM3U 'VUPlayer %q This module exploits a stack overflow in VUPlayer 2.44 and lower. The vulnerability is caused due to a boundary error within the parsing of playlists containing an overly entries. After overwriting EIP with o...