{"uuid": "92f84c0e-a76e-4384-abd7-d4ac2199e7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3068", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/dvdx_plf_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"n00b\", \"D3r K0n!G\", \"sickness\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack-based buffer overflow on DVD X Player 5.5 Pro and\\n          Standard.  By supplying a long string of data in a plf file (playlist), the\\n          MediaPlayerCtrl.dll component will attempt to extract a filename out of the string,\\n          and then copy it on the stack without any proper bounds checking, which causes a\\n          buffer overflow, and results in arbitrary code execution under the context of the user.\\n\\n          This module has been designed to target common Windows systems such as:\\n          Windows XP SP2/SP3, Windows Vista, and Windows 7.\", \"disclosure_date\": \"2007-06-02\", \"fullname\": \"exploit/windows/fileformat/dvdx_plf_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"DVD X Player 5.5 .plf PlayList Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/dvdx_plf_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/dvdx_plf_bof\", \"references\": [\"CVE-2007-3068\", \"OSVDB-36956\", \"BID-24278\", \"EDB-17745\"], \"rport\": null, \"session_types\": false, \"targets\": [\"DVD X Player 5.5 Standard / Pro\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:23.584838Z"}