CVE-2012-10031
HIGHBlazeVideo HDTV Player Pro v6.6.0.3 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2012-10031.
PoCs published by Metasploit, Nezim, b33f, including Metasploit module exploits/windows/fileformat/blazedvd_hdtv_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in BlazeVideo HDTV Player Pro v6.6 via a maliciously crafted .plf file. The vulnerability arises from unsafe handling of filenames in MediaPlayerCtrl.dll, leading to arbitrary code execution.
Description
BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA() to extract a filename from a URL-like string. The returned value is then copied to a fixed-size stack buffer using an inline strcpy call without bounds checking. If the input exceeds the buffer size, this leads to a stack overflow and potential arbitrary code execution under the context of the user.
Exploits (4)
This Metasploit module exploits a stack-based buffer overflow in BlazeVideo HDTV Player Pro v6.6 via a maliciously crafted .plf file. The vulnerability arises from unsafe handling of filenames in MediaPlayerCtrl.dll, leading to arbitrary code execution.
This exploit targets a buffer overflow vulnerability in BlazeVideo HDTV Player 6.6 Professional. It crafts a malicious PLF file with a NOP sled, shellcode, and a return address to achieve arbitrary code execution.
This exploit targets BlazeVideo HDTV Player 6.6 Professional via a crafted .plf file, leveraging SEH overwrite, DEP bypass via VirtualAlloc(), and ROP chains to achieve remote code execution. The payload binds a shell on port 9988.
This Metasploit module exploits a stack-based buffer overflow in BlazeVideo HDTV Player Pro v6.6 by crafting a malicious .plf file with an overly long filename, leading to arbitrary code execution via SEH overwrite.
References (6)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N