CVE-2008-5735

This exploit targets a buffer overflow vulnerability in CoolPlayer (Skin) by crafting a malicious .ini file with a long string to overwrite the EIP and execute shellcode. It includes a Metasploit-generated alphanumeric shellcode for adding a user.

This exploit targets a local buffer overflow in CoolPlayer 2.19 via a maliciously crafted skin file. It overwrites the EIP with a JMP ESP instruction and executes shellcode to spawn calc.exe.