CVE-2009-0182
HIGHVUPlayer < 2.49 - Buffer Overflow via Long URL in .pls File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-0182.
PoCs published by SkD, Bryan Leong, nobodyatall648, including Metasploit module exploits/windows/fileformat/vuplayer_cue.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in VUPlayer <= 2.49 via a maliciously crafted .PLS playlist file. It uses a universal JMP ESP address in BASS.DLL and executes a calc.exe payload via shellcode.
Description
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.
Exploits (4)
This exploit targets a buffer overflow vulnerability in VUPlayer <= 2.49 via a maliciously crafted .PLS playlist file. It uses a universal JMP ESP address in BASS.DLL and executes a calc.exe payload via shellcode.
This exploit leverages a local buffer overflow in VUPlayer 2.49 via a maliciously crafted .wax playlist file to achieve arbitrary code execution, bypassing DEP using ROP chains targeting non-ASLR modules (BASS.dll, BASSMIDI.dll). The payload includes a calc.exe shellcode generated with msfvenom.
This repository contains functional exploit code for CVE-2009-0182, demonstrating a local buffer overflow in VUPlayer 2.49 via a crafted .wax playlist file. It includes two PoCs: one for standard exploitation and another with a ROP chain to bypass DEP.
This Metasploit module exploits a stack-based buffer overflow in VUPlayer <= 2.49 via a maliciously crafted CUE file. It leverages a hardcoded return address (0x1010539f) to execute arbitrary shellcode, achieving remote code execution.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H