CVE-2008-3733
EO Video 1.36 - Stack-Based Buffer Overflow via Long Name Element in ProjectElement
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-3733. PoCs published by His0k4, j0rgan.
AI-analyzed exploit summary This exploit targets a SEH overwrite vulnerability in EO Video v1.36 via a malformed playlist file. It uses a structured payload with a header, buffer overflow, SEH bypass, and shellcode to execute arbitrary commands (e.g., calc.exe).
Description
Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .eop (aka playlist) file with a ProjectElement element that contains a long Name element.
Exploits (2)
This exploit targets a SEH overwrite vulnerability in EO Video v1.36 via a malformed playlist file. It uses a structured payload with a header, buffer overflow, SEH bypass, and shellcode to execute arbitrary commands (e.g., calc.exe).
This exploit demonstrates a heap overflow vulnerability in EO Video v1.36 by crafting a malicious *.eop playlist file with an oversized <Name> buffer. The PoC triggers a crash (DoS) and may allow arbitrary code execution under certain conditions.