CVE-2006-6199
BlazeVideo BlazeDVD Standard and Professional 5.0 - Stack-based Buffer Overflow via PLF Playlist Filename
Title source: llmExploitation Summary
EIP tracks 10 public exploits for CVE-2006-6199.
PoCs published by Mike Czumak, PuN1sh3r, Craig Freyman, including Metasploit module exploits/windows/fileformat/blazedvd_plf.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in BlazeDVD 6.2 via a malformed .plf file to achieve arbitrary code execution by overwriting SEH and executing shellcode.
Description
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist.
Exploits (10)
This exploit leverages a buffer overflow vulnerability in BlazeDVD 6.2 via a malformed .plf file to achieve arbitrary code execution by overwriting SEH and executing shellcode.
This exploit targets a local stack-based buffer overflow in BlazeDVD Pro 6.1 by crafting a malicious .plf file. It overwrites the EIP with a JMP ESP address from kernel32.dll and executes a Metasploit-generated calc.exe payload.
This Metasploit module exploits a vulnerability in BlazeDVD 6.1 by crafting a malicious PLF file to bypass DEP and ASLR, leading to arbitrary code execution. It uses a ROP chain to achieve this, targeting a specific return address and offset.
This Metasploit module exploits a stack-based buffer overflow in BlazeDVD 5.1 by crafting a malicious PLF file. The exploit overwrites the return address to execute arbitrary shellcode, achieving remote code execution.
This exploit demonstrates a stack-based buffer overflow in BlazeDVD v5.1, bypassing ASLR and DEP on Windows 7 via ROP chains and shellcode execution. It leverages a .plf file to trigger the vulnerability and achieve arbitrary code execution.
This exploit targets a local buffer overflow vulnerability in BlazeDVD 5.1 Professional via a maliciously crafted .PLF file. It leverages SEH overwrite with a hardcoded address and shellcode to achieve arbitrary code execution.
This exploit demonstrates a buffer overflow in BlazeDVD 5.0 via a crafted PLF playlist file, overwriting EIP to execute arbitrary code (calc.exe). The PoC includes a Metasploit-generated shellcode and a hardcoded return address.
This exploit demonstrates a stack-based buffer overflow in BlazeVideo HDTV Player <= v2.1 by crafting a malicious PLF file with an overly long path. It includes shellcode to execute calc.exe and provides multiple JMP ESP addresses for various Windows versions.
This Perl script exploits a buffer overflow vulnerability in BlazeDVD 5.1 Professional and Blaze HDTV Player 6.0 via a maliciously crafted .PLF file. It leverages SEH (Structured Exception Handler) overwrites to achieve arbitrary code execution.
This Metasploit module exploits a stack-based buffer overflow in BlazeDVD 5.1 and 6.2 via a maliciously crafted PLF file, achieving remote code execution through SEH overwrites and ROP chains.