CVE-2012-1775
VLC media player < 2.0.1 - Remote Code Execution via Crafted MMS Stream
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-1775.
PoCs published by Metasploit, Florent Hochwelker, sinn3r, juan vazquez, including Metasploit module exploits/windows/browser/vlc_mms_bof.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in VLC media player (CVE-2012-1775) via a malicious MMS URI delivered through a browser. It leverages SEH overwrite and heap spraying to achieve remote code execution on vulnerable systems.
Description
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
Exploits (2)
This Metasploit module exploits a buffer overflow in VLC media player (CVE-2012-1775) via a malicious MMS URI delivered through a browser. It leverages SEH overwrite and heap spraying to achieve remote code execution on vulnerable systems.
This Metasploit module exploits a buffer overflow in VLC media player prior to version 2.0.0 via a malicious MMS URI, leveraging heap spraying and SEH overwrite to achieve remote code execution. It targets Internet Explorer 6 and 7 on Windows XP SP3 due to the lack of DEP/ASLR bypass.