CVE-2009-2566

This exploit targets a buffer overflow vulnerability in TFM MMPlayer 2.0 via a malformed M3U file, leveraging SEH overwrite to execute arbitrary shellcode (calc.exe in this case). The payload is encoded with PexAlphaNum and triggers via file parsing.

This Metasploit module exploits a buffer overflow in MMPlayer 2.2 by crafting a malformed M3U/PPL file with an overly long string to overwrite a SEH record, enabling arbitrary code execution. It uses a structured payload with NOPs, shellcode, and a calculated jump to trigger the vulnerability.