CVE-2008-4654
VLC Media Player 0.9.0-0.9.4 - Stack-Based Buffer Overflow in Ty Demux Plugin
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2008-4654.
PoCs published by Metasploit, KernelErr, Hexastrike, including Metasploit module exploits/windows/fileformat/videolan_tivo.
AI-analyzed exploit summary This exploit targets a buffer overflow in VideoLAN VLC 0.9.4 by crafting a malicious TY file. It leverages a specific return address to execute arbitrary code when the file is processed by the vulnerable software.
Description
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
Exploits (8)
This exploit targets a buffer overflow in VideoLAN VLC 0.9.4 by crafting a malicious TY file. It leverages a specific return address to execute arbitrary code when the file is processed by the vulnerable software.
This repository contains a functional exploit for CVE-2008-4654, a stack-based buffer overflow in VLC 0.9.4 when demuxing TiVo files. The exploit modifies a TiVo file to trigger the vulnerability, aligns the stack, and executes a shellcode payload (e.g., launching calc.exe).
This repository contains a functional exploit for CVE-2008-4654, a stack-based buffer overflow in VLC Media Player 0.9.4 when processing TiVo files. The exploit uses a WOW64 egghunter to bypass stack space limitations and execute arbitrary shellcode.
This repository contains a functional exploit for CVE-2008-4654, a stack-based buffer overflow in VLC Media Player via a crafted TiVo Ty file. The Python script modifies a sample .ty+ file to include a payload that executes arbitrary code when opened with VLC.
This repository contains a functional exploit for CVE-2008-4654, a stack-based buffer overflow in VideoLAN VLC media player 0.9.4. The exploit crafts a malicious TiVo file to trigger the vulnerability and execute arbitrary shellcode (e.g., launching calc.exe).
This exploit targets a stack-based buffer overflow in VLC Media Player via a maliciously crafted TY file. It includes shellcode for Windows XP SP1/SP2 and leverages a JMP ESP instruction in shell32.dll to achieve remote code execution.
This Perl script exploits a buffer overflow vulnerability in VLC 0.9.4 by crafting a malicious .TY file that triggers a reverse shell to a specified host and port. The exploit uses a combination of heap spraying and SEH manipulation to achieve reliable remote code execution.
This exploit targets a buffer overflow vulnerability in VideoLAN VLC 0.9.4 by crafting a malicious TY file. It leverages a return address override to execute arbitrary payloads, achieving remote code execution.