Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-1574.
PoCs published by Metasploit, jduck, including Metasploit module exploits/windows/fileformat/vlc_modplug_s3m.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in libmod_plugin (CVE-2011-1574) by crafting a malicious S3M file to achieve remote code execution on VLC 1.1.8. It bypasses DEP via ROP but not ASLR.
Description
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in libmod_plugin (CVE-2011-1574) by crafting a malicious S3M file to achieve remote code execution on VLC 1.1.8. It bypasses DEP via ROP but not ASLR.
This Metasploit module exploits a stack buffer overflow in VLC's libmod_plugin (CVE-2011-1574) via a malicious S3M file, achieving remote code execution on Windows XP SP3. It uses ROP to bypass DEP and includes a mutex to prevent double payload execution.