CVE-2009-4962
Fat Player 0.6b - Remote Code Execution via Long String in WAV File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2009-4962.
PoCs published by James Fitts, Praveen Darshanam, ahwak2000, including Metasploit module exploits/windows/fileformat/fatplayer_wav.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in FatPlayer 0.6b via a malicious WAV file. It leverages SEH overwrite with a pop-pop-ret gadget and executes a Shikata Ga Nai-encoded payload to spawn calc.exe.
Description
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information.
Exploits (4)
This exploit targets a buffer overflow vulnerability in FatPlayer 0.6b via a malicious WAV file. It leverages SEH overwrite with a pop-pop-ret gadget and executes a Shikata Ga Nai-encoded payload to spawn calc.exe.
This exploit leverages a stack-based buffer overflow in Fat Player 0.6b via a maliciously crafted .wav file. It uses SEH (Structured Exception Handler) overwrite with a pop-pop-ret gadget and shellcode to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in Fat Player 0.6b by crafting a malicious WAV file. The payload includes shellcode and a jump to ESP to achieve arbitrary code execution.
This Metasploit module exploits a buffer overflow in Fat Player 0.6b by crafting a malicious WAV file that triggers arbitrary code execution via SEH overwrite. The exploit uses a jump-back technique to redirect execution flow to the payload.