cve/cves/2011/CVE-2011-5170.md

CVE-2011-5170

Description

Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.

POC

Reference

• http://www.exploit-db.com/exploits/18195
• http://www.exploit-db.com/exploits/18178

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/18195
• https://www.exploit-db.com/exploits/18178

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ccmplayer_m3u_bof.rb