Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflow

0
52

This Metasploit module exploits a vulnerability found in Subtitle Processor 7. By supplying a long string of data as a .m3u file, Subtitle Processor first converts this input in Unicode, which expands the string size, and then attempts to copy it inline on the stack. This results a buffer overflow with SEH overwritten, allowing arbitrary code execution.

Source: Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflow