CVE-2008-5036
VLC media player 0.9.x - Stack-based Buffer Overflow via RealText Subtitle Parsing
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-5036.
PoCs published by Metasploit, SkD, Tobias Klein, SkD, juan vazquez, including Metasploit module exploits/windows/fileformat/vlc_realtext.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in VLC Media Player < 0.9.6 via a malicious RealText subtitle file. It generates both an MP4 and an RT file to trigger the vulnerability, leading to arbitrary code execution.
Description
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.
Exploits (3)
This exploit targets a stack buffer overflow in VLC Media Player < 0.9.6 via a malicious RealText subtitle file. It generates both an MP4 and an RT file to trigger the vulnerability, leading to arbitrary code execution.
This exploit targets a stack-based buffer overflow in VLC Media Player < 0.9.6 via a maliciously crafted .RT file. It leverages a 'jmp esp' address in shell32.dll to execute a calc.exe payload via alphanumeric shellcode.
This exploit targets a stack buffer overflow in VLC Media Player < 0.9.6 via a malicious RealText subtitle file. It generates both an MP4 and RT file to trigger the vulnerability, leading to arbitrary code execution.