CVE-2011-0499
VideoSpirit Pro < 1.6.8.1 and VideoSpirit Lite < 1.4.0.1 - Buffer Overflow via Long Name Attribute in .visprj File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-0499.
PoCs published by Acidgen, including Metasploit module exploits/windows/fileformat/videospirit_visprj.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Video Spirit Pro <= 1.70 via a malicious .visprj file, bypassing DEP and ASLR using ROP gadgets from OverlayPlug.dll. It achieves arbitrary code execution on Windows XP, Vista, and 7.
Description
Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project (.visprj) file containing a valitem element with a long "name" attribute. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Video Spirit Pro <= 1.70 via a malicious .visprj file, bypassing DEP and ASLR using ROP gadgets from OverlayPlug.dll. It achieves arbitrary code execution on Windows XP, Vista, and 7.
This exploit demonstrates a local buffer overflow vulnerability in VideoSpirit Pro v1.68 by crafting a malicious .visprj project file with an overly long 'mp3' value, leading to arbitrary code execution via a structured payload.
This Metasploit module exploits a stack buffer overflow in Video Spirit Pro <= 1.70 via a malicious .visprj file, bypassing DEP and ASLR on Windows XP, Vista, and 7. It uses ROP gadgets to achieve arbitrary code execution.