CVE-2007-1559
Roxio CinePlayer 3.2 - Remote Code Execution via Long Property Values or Method Arguments
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-1559.
PoCs published by Metasploit, Carsten Eiram, including Metasploit module exploits/windows/browser/roxio_cineplayer.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in Roxio CinePlayer's ActiveX control (SonicMediaPlayer.dll 3.0.0.1) via an overly long 'DiskType' parameter. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
Description
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.
Exploits (3)
This is a Metasploit module exploiting a stack-based buffer overflow in Roxio CinePlayer's ActiveX control (SonicMediaPlayer.dll 3.0.0.1) via an overly long 'DiskType' parameter. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
This is a working proof-of-concept exploit for a stack-based buffer overflow in Roxio CinePlayer 3.2. It leverages an ActiveX control vulnerability to execute arbitrary shellcode via a malicious HTML document.
This Metasploit module exploits a stack-based buffer overflow in the Roxio CinePlayer ActiveX control (SonicMediaPlayer.dll 3.0.0.1) via an overly long 'DiskType' parameter. It delivers a malicious HTML page with JavaScript to trigger the vulnerability and execute arbitrary code.