Stack-based buffer overflow in Elecard AVC HD Player allows remote malicious users to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file.
/*ELECARD AVC HD PLAYER STACK BUFFER OVERFLOW ( SEH OVERWRITE )
Name: elecardc
CREDITS: the one and only fl0 fl0w
004533AE F3:A5 REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS>
SEH chain of main thread
Address SE handler
0012CB54 FFFFFFFF
Open in debugger and you'll see SEH -->FFFFFFFF and NEXT_SEH EB049090
*/
//START
#includ ...
Vulmon