Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-2566.
PoCs published by ThE g0bL!N, RjRjh Hack3r, bcoles, including Metasploit module exploits/windows/fileformat/tfm_mmplayer_m3u_ppl_bof.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in TFM MMPlayer 2.0 via a malformed M3U file, leveraging SEH overwrite to execute arbitrary shellcode (calc.exe in this case). The payload is encoded with PexAlphaNum and triggers via file parsing.
Description
Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.
Exploits (2)
This exploit targets a buffer overflow vulnerability in TFM MMPlayer 2.0 via a malformed M3U file, leveraging SEH overwrite to execute arbitrary shellcode (calc.exe in this case). The payload is encoded with PexAlphaNum and triggers via file parsing.
This Metasploit module exploits a buffer overflow in MMPlayer 2.2 by crafting a malformed M3U/PPL file with an overly long string to overwrite a SEH record, enabling arbitrary code execution. It uses a structured payload with NOPs, shellcode, and a calculated jump to trigger the vulnerability.