CVE-2010-0356
Viscom Software Movie Player Pro SDK ActiveX 6.8 - Stack-Based Buffer Overflow via DrawText strFontName Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-0356.
PoCs published by Metasploit, shinnai, including Metasploit module exploits/windows/browser/viscom_movieplayer_drawtext.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in Viscom Software Movie Player Pro SDK ActiveX 6.8 via a long strFontName parameter to the DrawText method. It includes DEP and ASLR bypass techniques for IE8 with Java support.
Description
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method.
Exploits (3)
This is a Metasploit module exploiting a stack-based buffer overflow in Viscom Software Movie Player Pro SDK ActiveX 6.8 via a long strFontName parameter to the DrawText method. It includes DEP and ASLR bypass techniques for IE8 with Java support.
This exploit demonstrates a stack-based buffer overflow in Viscom Software Movie Player Pro SDK ActiveX 6.8 via the 'DrawText' method's 'strFontName' parameter. It overwrites EIP with a hardcoded address and includes shellcode for arbitrary code execution.
This Metasploit module exploits a stack-based buffer overflow in the Viscom Software Movie Player Pro SDK ActiveX control via the DrawText method. It includes ROP chains to bypass DEP and ASLR on various Windows versions with Java support.