CVE-2009-3429
Pirate Radio Destiny Media Player 1.61 - Stack-Based Buffer Overflow via .pls Playlist File
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2009-3429.
PoCs published by Metasploit, ThE g0bL!N, Encrypt3d.M!nd, including Metasploit module exploits/windows/fileformat/destinymediaplayer16.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Destiny Media Player 1.61 via a maliciously crafted M3U playlist file. It leverages a JMP ESP instruction to execute arbitrary shellcode, achieving remote code execution when the victim opens the file.
Description
Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file.
Exploits (7)
This exploit targets a stack-based buffer overflow in Destiny Media Player 1.61 via a maliciously crafted M3U playlist file. It leverages a JMP ESP instruction to execute arbitrary shellcode, achieving remote code execution when the victim opens the file.
This exploit targets a buffer overflow vulnerability in Destiny Media Player 1.61 via a malformed .pls file. It leverages SEH overwrite with a jump to shellcode that spawns calc.exe.
This exploit targets a local buffer overflow in Destiny Media Player 1.61 via a maliciously crafted .lst file. It uses a SEH-based overflow with a calc.exe payload, tested on Windows XP SP3.
This exploit targets a local stack overflow vulnerability in Destiny Media Player 1.61 via a maliciously crafted .m3u file. It overwrites the EIP with a call to ESP from kernel32.dll and executes a calc.exe payload using Metasploit-generated shellcode.
This is a buffer overflow PoC for Destiny Media Player that writes a malicious .lst file with a controlled EIP overwrite. It demonstrates a crash condition but lacks a functional payload.
This Perl script generates a malicious .m3u file containing a buffer overflow payload (31185 'A' characters) targeting Destiny Media Player 1.61.0. The PoC triggers a local stack overflow when the file is opened, potentially allowing arbitrary code execution.
This Metasploit module exploits a stack-based buffer overflow in Destiny Media Player 1.61 via a maliciously crafted M3U playlist file. It leverages a JMP ESP instruction to redirect execution to the payload, achieving remote code execution.