CVE-2007-0017
VLC Media Player 0.7.0-0.8.6 - Remote Code Execution via Format String in CDDA/VCDX URI Handler
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-0017. PoCs published by MoAB.
AI-analyzed exploit summary This exploit generates a malicious .m3u file targeting VLC Player for OSX (CVE-2007-0017), leveraging a format string vulnerability to execute arbitrary code via a bindshell payload.
Description
Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX (libvcdx_plugin) plugin, in VideoLAN VLC 0.7.0 through 0.8.6 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an invalid URI, as demonstrated by a udp://-- URI in an M3U file.
Exploits (2)
This exploit generates a malicious .m3u file targeting VLC Player for OSX (CVE-2007-0017), leveraging a format string vulnerability to execute arbitrary code via a bindshell payload.
This exploit leverages a format string vulnerability in VLC Media Player for OSX on PPC to overwrite a saved return address, redirecting execution to shellcode. It generates a malicious .m3u file that triggers arbitrary code execution when opened.