CVE-2015-2509

This Metasploit module exploits CVE-2015-2509 by crafting a malicious .mcl file that triggers a UNC path download, leading to arbitrary code execution via Windows Media Center. The exploit generates a payload executable and embeds it in the MCL file for remote execution.

This exploit generates a malicious Music.mcl file that, when opened by Windows Media Center, executes an arbitrary command (e.g., calc.exe) due to improper XML parsing. It leverages CVE-2015-2509 to achieve remote code execution.

This Metasploit module exploits CVE-2015-2509 in Windows Media Center by crafting a malicious .mcl file that references a UNC path to execute a remote payload. The exploit generates a payload executable and an MCL file to trigger automatic remote file execution.