Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-2484.
PoCs published by Metasploit, Trancer, jduck, including Metasploit module exploits/windows/fileformat/vlc_smb_uri.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in VLC media player's Win32AddConnection function via a crafted SMB URI in an XSPF playlist file. It achieves remote code execution by leveraging a specific return address in libvout_directx_plugin.dll.
Description
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file.
Exploits (3)
This exploit targets a stack-based buffer overflow in VLC media player's Win32AddConnection function via a crafted SMB URI in an XSPF playlist file. It achieves remote code execution by leveraging a specific return address in libvout_directx_plugin.dll.
This exploit demonstrates a stack-based buffer overflow in VideoLAN VLC Media Player 0.9.9 via a maliciously crafted smb:// URI embedded in an XSPF playlist file. The overflow occurs when processing the URI, potentially leading to arbitrary code execution.
This Metasploit module exploits a stack-based buffer overflow in VLC media player (versions 0.9.9 to 1.0.1) via a maliciously crafted SMB URI in an XSPF playlist file. The exploit leverages a vulnerable Win32 function to achieve remote code execution.