CVE-2011-10022

This Metasploit module exploits a buffer overflow vulnerability in SPlayer 3.7 by sending a malicious 'Content-Type' header with excessive length, leading to arbitrary remote code execution. The exploit uses a unicode payload and SEH overwrite technique to achieve reliable exploitation.

This exploit demonstrates a buffer overflow vulnerability in SPlayer <= 3.7 (build 2055) by sending a maliciously crafted HTTP response with an oversized 'Content-Type' header. The payload includes shellcode to spawn calc.exe and leverages a SEH overwrite to achieve remote code execution.

This Metasploit module exploits a buffer overflow in SPlayer 3.7 via an excessively long 'Content-Type' header, leading to arbitrary remote code execution. It uses a Unicode-aware payload and SEH overwrite technique to achieve exploitation.