CVE-2009-1437
CoolPlayer Portable < 2.19.6 - Stack-based Buffer Overflow via Malformed Playlist File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-1437. PoCs published by His0k4, Stack, GoLd_M.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in CoolPlayer Portable via a maliciously crafted M3U file. It leverages a SEH overwrite with a calc.exe payload encoded using Metasploit's PexFnstenvSub encoder.
Description
Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.
Exploits (4)
This exploit targets a buffer overflow vulnerability in CoolPlayer Portable via a maliciously crafted M3U file. It leverages a SEH overwrite with a calc.exe payload encoded using Metasploit's PexFnstenvSub encoder.
This exploit targets a buffer overflow vulnerability in CoolPlayer Portable 2.19.1 via a maliciously crafted M3U file. It overwrites the EIP with a JMP ESP address from ntdll.dll and executes a calc.exe payload using alphanumeric shellcode.
This exploit generates a malicious .M3U file with a long string of 'A' characters to trigger a local stack overflow in CoolPlayer Portable 2.19.1. The PoC demonstrates the vulnerability but does not include a payload for remote code execution.
This repository contains a functional exploit for CVE-2009-1437, targeting CoolPlayer+ <= 2.19.6. The exploit leverages a buffer overflow vulnerability to achieve remote code execution via a crafted .m3u file.