EIP-2026-118554

PRE-CVE

FLVPlayer4Free 2.9 - '.fp4f' Remote Buffer Overflow

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118554. PoCs published by KedAns-Dz.

AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in FLVPlayer4Free v2.9 by crafting a malicious .fp4f file with a long HTTP string, overwriting the EIP with a JMP ESP instruction, and executing a reverse TCP shellcode.

Description

FLVPlayer4Free 2.9 - '.fp4f' Remote Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED

by KedAns-Dz · perlremotewindows

https://www.exploit-db.com/exploits/35509

View Code ZIP pw:eip

This exploit targets a stack-based buffer overflow in FLVPlayer4Free v2.9 by crafting a malicious .fp4f file with a long HTTP string, overwriting the EIP with a JMP ESP instruction, and executing a reverse TCP shellcode.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: FLVPlayer4Free v2.9.0

No auth needed

Prerequisites: Victim must open the malicious .fp4f file with FLVPlayer4Free

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026