CVE-2008-3408
CoolPlayer 2.18 - Stack-Based Buffer Overflow via Crafted m3u File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-3408. PoCs published by blake, data$hack, Guido Landi.
AI-analyzed exploit summary This exploit bypasses DEP in CoolPlayer 2.18 by leveraging a buffer overflow and ROP chain to disable DEP via SetProcessDEPPolicy, then executes a calc.exe shellcode payload.
Description
Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file.
Exploits (3)
This exploit bypasses DEP in CoolPlayer 2.18 by leveraging a buffer overflow and ROP chain to disable DEP via SetProcessDEPPolicy, then executes a calc.exe shellcode payload.
This exploit targets a buffer overflow vulnerability in Winamp 2.18 by creating a malicious M3U file. It overwrites the EIP with a JMP ESP instruction and includes shellcode to achieve remote code execution.
This exploit targets a vulnerability in user32.dll (CVE-2008-3408) on Windows XP SP3. It uses a shellcode payload (shikata_ga_nai encoded) to execute arbitrary code, specifically launching calc.exe, via a stack-based buffer overflow.