Exploitation Summary
EIP tracks 4 public exploits for CVE-2009-4756. PoCs published by Stack, Encrypt3d.M!nd, His0k4.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Beatport Player 1.0.0.283 via a maliciously crafted .M3U file. It leverages SEH overwrite to execute arbitrary shellcode, specifically spawning a command shell.
Description
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.
Exploits (4)
This exploit targets a stack-based buffer overflow in Beatport Player 1.0.0.283 via a maliciously crafted .M3U file. It leverages SEH overwrite to execute arbitrary shellcode, specifically spawning a command shell.
This exploit targets a local stack overflow vulnerability in Beatport Player 1.0.0.283 via a maliciously crafted .M3U file. It uses a PexAlphaNum-encoded shellcode to execute calc.exe as a proof-of-concept payload.
This exploit targets a SEH overwrite vulnerability in Beatport Player 1.0.0.283 via a malformed .m3u file. It uses a known SEH address from msacm32.drv and includes a Metasploit-generated shellcode to execute calc.exe.
This exploit demonstrates a local stack overflow vulnerability in Beatport Player 1.0.0.283 by creating a malformed .M3U file with an overly long string of 'A' characters. The vulnerability triggers an access violation when the file is processed, leading to a potential crash or arbitrary code execution.