CVE-2017-17932
CRITICALALLPlayer ALLMediaServer <= 0.95 - Remote Code Execution via TCP Port 888 Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2017-17932.
PoCs published by Mario Kartone Ciccarelli, Anurag Srivastava, Aloyce J. Makalanga, including Metasploit module exploits/windows/misc/allmediaserver_bof.
AI-analyzed exploit summary This exploit leverages a stack buffer overflow in ALLMediaServer 0.95 to achieve remote code execution via a ROP chain and shellcode injection. The payload is delivered over a network socket to trigger the vulnerability.
Description
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.
Exploits (4)
This exploit leverages a stack buffer overflow in ALLMediaServer 0.95 to achieve remote code execution via a ROP chain and shellcode injection. The payload is delivered over a network socket to trigger the vulnerability.
This Metasploit module exploits a stack buffer overflow in ALLMediaServer 0.95 via a malformed HTTP request. It leverages SEH overwrites and a hardcoded return address to achieve remote code execution.
This exploit demonstrates a buffer overflow vulnerability in ALLPlayer ALLMediaServer 0.95 and earlier by sending a long string to TCP port 888, potentially leading to remote code execution or denial of service.
This Metasploit module exploits a stack buffer overflow in ALLMediaServer 0.8 via a crafted HTTP request, leveraging SEH overwrites and ROP chains for DEP bypass on Windows XP, while using a simpler approach for Windows 7 due to reliability issues.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H