CVE-2007-4722
Move Media Player - Stack-Based Buffer Overflow via Play or Buzzer Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-4722. PoCs published by Elazar, anonymous.
AI-analyzed exploit summary This exploit targets a SEH overwrite vulnerability in Move Networks Quantum Streaming Player via a crafted HTML file. It uses a Metasploit-generated shellcode to execute `calc.exe` on Windows XP SP2 with IE6.
Description
Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the (1) Play and (2) Buzzer methods.
Exploits (2)
This exploit targets a SEH overwrite vulnerability in Move Networks Quantum Streaming Player via a crafted HTML file. It uses a Metasploit-generated shellcode to execute `calc.exe` on Windows XP SP2 with IE6.
This exploit targets a buffer overflow vulnerability in Move Media Player's ActiveX control (CVE-2007-4722) by overwriting SEH to execute arbitrary shellcode. It uses a Metasploit-generated payload to launch calc.exe on Windows XP SP2.