cve/cves/2011/CVE-2011-3625.md

CVE-2011-3625

Description

Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle file.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/18954

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/mplayer_sami_bof.rb