CVE-2011-5171
CyberLink Power2Go 7 build 196 and 8 build 1031 - Remote Code Execution via Crafted Project File Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-5171.
PoCs published by Metasploit, modpr0be, including Metasploit module exploits/windows/fileformat/cyberlink_p2g_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in CyberLink Power2Go 8.x via a malformed p2g file with an overly long 'name' attribute, leading to SEH overwrite and arbitrary code execution.
Description
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name parameters in a p2g project file.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in CyberLink Power2Go 8.x via a malformed p2g file with an overly long 'name' attribute, leading to SEH overwrite and arbitrary code execution.
This exploit targets a stack-based buffer overflow in CyberLink Power2Go and WaveEditor via malformed project files. It crafts a .p2g or .wve file with an overly long 'File name' field to overwrite SEH, leading to potential arbitrary code execution.
This Metasploit module exploits a stack buffer overflow in CyberLink Power2Go 8.x via a malformed p2g file with an overly long 'name' attribute, leading to SEH overwrite and arbitrary code execution.