CVE-2006-6063
XMPlay < 3.3.0.5 - Stack-Based Buffer Overflow via M3U File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2006-6063.
PoCs published by Metasploit, Greg Linares, including Metasploit module exploits/windows/browser/xmplay_asx.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in XMPlay 3.3.0.4 via an overly long filename in an ASX playlist file. It delivers a payload encoded with alphanumeric upper characters to achieve remote code execution.
Description
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long (1) FileName, and cause a crash via a long (2) DisplayName.
Exploits (4)
This Metasploit module exploits a stack buffer overflow in XMPlay 3.3.0.4 via an overly long filename in an ASX playlist file. It delivers a payload encoded with alphanumeric upper characters to achieve remote code execution.
This exploit leverages a stack-based buffer overflow in XMPlay 3.3.0.4 by crafting a malicious .ASX file with an overly long filename, leading to arbitrary code execution (CALC.exe) via embedded shellcode. It includes multiple JMP ESP addresses for different Windows versions.
This exploit targets a stack-based buffer overflow in XMPlay 3.3.0.4 by crafting a malicious .M3U file. It uses a JMP ESP address from user32.dll to redirect execution to shellcode that launches calc.exe.
This Metasploit module exploits a stack buffer overflow in XMPlay 3.3.0.4 by crafting an ASX playlist file with an overly long filename, leading to arbitrary code execution. The exploit uses SEH overwrites and alphanumeric encoding to bypass bad characters.