Exploitation Summary
EIP tracks 4 public exploits for CVE-2009-2650.
PoCs published by dijital1, mr_me, hack4love, including Metasploit module exploits/windows/fileformat/mediajukebox.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Media Jukebox 8.0.400 via a crafted m3u or pls file, leveraging SEH overwrite for arbitrary code execution. The exploit uses a 'pop, pop, ret' gadget from dsp_mjMain.dll to bypass protections.
Description
Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file.
Exploits (4)
This Metasploit module exploits a stack buffer overflow in Media Jukebox 8.0.400 via a crafted m3u or pls file, leveraging SEH overwrite for arbitrary code execution. The exploit uses a 'pop, pop, ret' gadget from dsp_mjMain.dll to bypass protections.
This exploit targets a local buffer overflow vulnerability in Media Jukebox 8 via a crafted .pls playlist file. It leverages SEH overwrite with a universal p/p/r address from wnaspi32.dll and includes a reverse TCP shell payload.
This exploit is a Perl script that generates a malicious .m3u file containing a large buffer of 'A' characters (5000 bytes) to trigger a local heap overflow in MultiMedia Jukebox 4.0 Build 020124. The vulnerability is exploited by writing the payload to a file, which when opened by the target software, causes a crash due to the overflow.
This Metasploit module exploits a stack buffer overflow in Media Jukebox 8.0.400 via a crafted m3u or pls file, leveraging SEH overwrite for remote code execution. It targets specific Windows XP versions with known return addresses in dsp_mjMain.dll.