CVE-2008-5735
CoolPlayer 2.17-2.19 - Stack-based Buffer Overflow via PlaylistSkin in Skin File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-5735. PoCs published by Encrypt3d.M!nd, r0ut3r.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in CoolPlayer (Skin) by crafting a malicious .ini file with a long string to overwrite the EIP and execute shellcode. It includes a Metasploit-generated alphanumeric shellcode for adding a user.
Description
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.
Exploits (2)
This exploit targets a buffer overflow vulnerability in CoolPlayer (Skin) by crafting a malicious .ini file with a long string to overwrite the EIP and execute shellcode. It includes a Metasploit-generated alphanumeric shellcode for adding a user.
This exploit targets a local buffer overflow in CoolPlayer 2.19 via a maliciously crafted skin file. It overwrites the EIP with a JMP ESP instruction and executes shellcode to spawn calc.exe.