Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-10008.
PoCs published by C4SS!0 & h1ch4m, C4SS!0 and h1ch4m, Gabor Seljan, including Metasploit module exploits/windows/fileformat/mplayer_m3u_bof.
AI-analyzed exploit summary This Perl script exploits a buffer overflow vulnerability in MPlayer Lite 33064 via a crafted .m3u file, leveraging SEH overwrite and shellcode execution for remote code execution.
Description
A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed by the player, particularly via drag-and-drop interaction. This flaw allows for control of the execution flow through SEH overwrite and a DEP bypass using a ROP chain that leverages known gadgets in loaded DLLs. Successful exploitation may result in arbitrary code execution with the privileges of the current user.
Exploits (2)
This Perl script exploits a buffer overflow vulnerability in MPlayer Lite 33064 via a crafted .m3u file, leveraging SEH overwrite and shellcode execution for remote code execution.
This Metasploit module exploits a stack-based buffer overflow in MPlayer Lite r33064 via a crafted .M3U file. It uses a ROP chain to bypass DEP and execute arbitrary code when the victim opens the file.
References (3)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N