CVE-2010-0480

This Metasploit module exploits a stack-based buffer overflow in l3codecx.ax via a maliciously crafted AVI file with MPEG Layer-3 audio content. It leverages the .NET DLL memory technique to achieve remote code execution on vulnerable Windows systems.

This exploit generates a malformed AVI file by modifying the 'nSamplesPerSec' field to trigger a division-by-zero vulnerability in Microsoft MPEG Layer-3 Audio Decoder (l3codeca.acm). The PoC creates a proof-of-concept file ('poc.avi') that can cause a denial-of-service when processed by the vulnerable decoder.

This exploit targets a stack-based buffer overflow in Microsoft MPEG Layer-3 audio codec (l3codeca.acm) via a crafted HTML file embedding a malicious DLL. The shellcode executes arbitrary commands, demonstrating remote code execution (RCE).

This Metasploit module exploits a stack-based buffer overflow in l3codecx.ax via a maliciously crafted AVI file with MPEG Layer-3 audio content. It leverages the .NET DLL memory technique to achieve remote code execution by overwriting the least significant bytes of EIP with zeros.