CVE-2025-34128

This Metasploit module exploits a buffer overflow in the X360 VideoPlayer ActiveX control via the 'ConvertFile()' method to bypass ASLR/DEP and execute arbitrary code. It uses a combination of heap spraying and ROP techniques to achieve remote code execution on Windows systems.

This exploit leverages a buffer overflow in the X360 VideoPlayer ActiveX Control to achieve arbitrary memory read/write, bypassing ASLR and DEP. It uses heap spraying and controlled memcpy to corrupt typed array structures, leading to remote code execution via shellcode.

This Metasploit module exploits a buffer overflow in the X360 VideoPlayer ActiveX control via the 'SetText' method, bypassing ASLR/DEP to achieve remote code execution. It uses a combination of heap spraying, ROP chains, and stack manipulation to execute arbitrary payloads.