Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4754. PoCs published by His0k4, SirGod.
AI-analyzed exploit summary This exploit targets a SEH overwrite vulnerability in Mercury Audio Player 1.21 via a crafted .m3u file. It includes shellcode for executing calc.exe and an egghunter to locate the payload in memory.
Description
Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.
Exploits (2)
This exploit targets a SEH overwrite vulnerability in Mercury Audio Player 1.21 via a crafted .m3u file. It includes shellcode for executing calc.exe and an egghunter to locate the payload in memory.
This exploit generates a malicious .M3U file with a long string of 'A' characters to trigger a local stack overflow in Mercury Audio Player 1.21. The PoC demonstrates the vulnerability but does not include a payload for execution.