Exploitation Summary
EIP tracks 4 public exploits for CVE-2010-5299.
PoCs published by Necmettin COSKUN, Metasploit, James Fitts, including Metasploit module exploits/windows/fileformat/microp_mppl.
AI-analyzed exploit summary This Ruby script generates a malicious .mppl file that exploits a local stack-based buffer overflow in MicroP 0.1.1.1600. It crafts a payload with shellcode (User32-free Messagebox) and overwrites the EIP to achieve arbitrary code execution.
Description
Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file. NOTE: it has been reported that the overflow is in the lpFileName parameter of the CreateFileA function, but the overflow is probably caused by a separate, unnamed function.
Exploits (4)
This Ruby script generates a malicious .mppl file that exploits a local stack-based buffer overflow in MicroP 0.1.1.1600. It crafts a payload with shellcode (User32-free Messagebox) and overwrites the EIP to achieve arbitrary code execution.
This Metasploit module exploits a stack-based buffer overflow in MicroP 0.1.1.1600 by crafting a malicious .mppl file that overwrites the lpFileName parameter of CreateFileA(), leading to arbitrary code execution.
This exploit demonstrates a buffer overflow vulnerability in MicroP 0.1.1.1600 by crafting a malicious MPPL file that triggers a stack-based overflow, overwriting EIP with a controlled address to execute arbitrary shellcode (calc.exe).
This Metasploit module exploits a stack-based buffer overflow in MicroP 0.1.1.1600 by crafting a malicious .mppl file that overwrites the lpFileName parameter of CreateFileA(), leading to arbitrary code execution.