Super Player 3500 contains a buffer prone to exploitation via an overly long string. The vulnerability is caused due to a boundary error in Super Player when handling long .m3u files. When a large playlist is processed a buffer overflow occurs and allows an attacker to gain control of the execution by overwriting a return address. This can be exploited via a specially crafted .m3u file. This module runs a malicious web server on the Core Impact Console and waits for an unsuspecting user to trigger the exploit by connecting to it.
Exploit Platform
Exploit Type
Product Name