CVE-2009-0174
VUPlayer 2.49 - Remote Code Execution via Long ASF URI in ASX REF Element
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-0174. PoCs published by sCORPINo, His0k4, Houssamix.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in VUPlayer 2.49 by crafting a malicious .asx file. It uses a JMP ESP address from shell32.dll to redirect execution to the embedded shellcode, which spawns a calculator as a proof of concept.
Description
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.
Exploits (4)
This exploit targets a buffer overflow vulnerability in VUPlayer 2.49 by crafting a malicious .asx file. It uses a JMP ESP address from shell32.dll to redirect execution to the embedded shellcode, which spawns a calculator as a proof of concept.
This exploit targets a buffer overflow vulnerability in VUPlayer 2.49 via a maliciously crafted .ASX file. It leverages a universal return address from bass.dll and includes a Metasploit-generated shellcode to execute arbitrary commands (e.g., launching notepad).
This exploit targets a stack overflow vulnerability in VUPlayer 2.49 via a maliciously crafted .asx file. It uses a NOP sled and alphanumeric shellcode to execute arbitrary commands (e.g., launching calc.exe) when the file is opened.
This exploit is a proof-of-concept for a local stack overflow vulnerability in VUPlayer 2.49, triggered via a maliciously crafted .asx file. The code demonstrates control over EIP and ECX registers, with a payload designed to overflow the buffer.