CVE-2020-37050
CRITICALQuick Player 1.3 - Buffer Overflow via Malicious .m3l File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37050. PoCs published by Felipe Winsnes.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in Quick Player 1.3 via a maliciously crafted .m3l file, leveraging Unicode and SEH techniques to achieve arbitrary code execution. The payload is generated using msfvenom and includes alignment and return address manipulation for reliable exploitation.
Description
Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading mechanism, potentially enabling remote code execution.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in Quick Player 1.3 via a maliciously crafted .m3l file, leveraging Unicode and SEH techniques to achieve arbitrary code execution. The payload is generated using msfvenom and includes alignment and return address manipulation for reliable exploitation.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H