Exploitation Summary
EIP tracks 7 public exploits for CVE-2004-0964.
PoCs published by C4SS!0 & h1ch4m, Metasploit, His0k4, including Metasploit module exploits/windows/fileformat/zinfaudioplayer221_pls.
AI-analyzed exploit summary This exploit leverages a buffer overflow in Zinf Audio Player v2.2.1 via a maliciously crafted PLS file to bypass DEP using ROP chains and execute arbitrary shellcode (e.g., launching calc.exe).
Description
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
Exploits (7)
This exploit leverages a buffer overflow in Zinf Audio Player v2.2.1 via a maliciously crafted PLS file to bypass DEP using ROP chains and execute arbitrary shellcode (e.g., launching calc.exe).
This exploit targets a stack-based buffer overflow in Zinf Audio Player 2.2.1 via a maliciously crafted PLS file. It leverages SEH overwrites to achieve remote code execution when the victim opens the file.
This exploit targets a buffer overflow vulnerability in Zinf Audio Player 2.2.1 via a maliciously crafted .pls file. It overwrites the SEH (Structured Exception Handler) to execute arbitrary shellcode, which in this case launches calc.exe.
This exploit targets a local buffer overflow in Zinf Audio Player 2.2.1 via a maliciously crafted PLS file. It uses a universal return address and AlphaNumeric shellcode to execute arbitrary commands (e.g., calc.exe).
This exploit demonstrates a buffer overflow vulnerability in Zinf Audio Player 2.2.1 by creating a malicious PLS file with a long string of NOP sleds. The PoC writes a 2000-byte payload to a file, which could trigger a crash or arbitrary code execution when opened by the vulnerable player.
This exploit generates a malicious .pls file that triggers a buffer overflow in Zinf 2.2.1 for Windows, leading to remote code execution via a crafted playlist file. The shellcode downloads and executes a payload from a specified URL.
This Metasploit module exploits a stack-based buffer overflow in Zinf Audio Player 2.2.1 via a maliciously crafted PLS file. It leverages SEH overwrites to achieve remote code execution when the victim opens the file.