deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Corel PDF Fusion Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/corelpdf_fusion_bof.rb
Disclosure date: 2013-07-08
References: CVE-2013-3248, OSVDB-94933, BID-61010, URL-http://web.archive.org/web/[PII_REDACTED]3800/http://secunia.com:80/advisories/52707/

Description:
This module exploits a stack-based buffer overflow vulnerability in version 1.11 of
          Corel PDF Fusion. The vulnerability exists while handling a XPS file with long entry
          names. In order for the payload to be executed, an attacker must convince the target
          user to open a specially crafted XPS file with Corel PDF Fusion. By doing so, the
          attacker can execute arbitrary code as the target user.
Metasploit Module: KingView Log File Parsing Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/kingview_kingmess_kvl.rb
Platform: win
Disclosure date: 2012-11-20
References: CVE-2012-4711, OSVDB-89690, BID-57909, URL-http://ics-cert.us-cert.gov/pdf/ICSA-13-043-02.pdf

Description:
This module exploits a vulnerability found in KingView <= 6.55. It exists in
          the KingMess.exe application when handling log files, due to the insecure usage of
          sprintf. This module uses a malformed .kvl file which must be opened by the victim
          via the KingMess.exe application, through the 'Browse Log Files' option. The module
          has been tested successfully on KingView 6.52 and KingView 6.53 Free Trial over
          Windows XP SP3.
Metasploit Module: MS11-006 Microsoft Windows CreateSizedDIBSECTION Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/ms11_006_createsizeddibsection.rb
Platform: win
Disclosure date: 2010-12-15
References: CVE-2010-3970, OSVDB-70263, MSB-MS11-006, BID-45662

Description:
This module exploits a stack-based buffer overflow in the handling of thumbnails
          within .MIC files and various Office documents. When processing a thumbnail bitmap
          containing a negative 'biClrUsed' value, a stack-based buffer overflow occurs. This
          leads to arbitrary code execution.

          In order to trigger the vulnerable code, the folder containing the document must be
          viewed using the "Thumbnails" view.
Metasploit Module: Nuance PDF Reader v6.0 Launch Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/nuance_pdf_launch_overflow.rb
Platform: win
Disclosure date: 2010-10-08
References: OSVDB-68514, URL-http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-062-stack-buffer-overflow-in-nuance-pdf-reader-v6-0/

Description:
This module exploits a stack buffer overflow in Nuance PDF Reader v6.0. The vulnerability is
          triggered when opening a malformed PDF file that contains an overly long string in a /Launch field. This results in overwriting a structured exception handler record.
          This exploit does not use javascript.
Metasploit Module: GSM SIM Editor 5.15 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/gsm_sim.rb
Platform: win
Disclosure date: 2010-07-07
References: CVE-2015-1171, OSVDB-81161, EDB-14258

Description:
This module exploits a stack-based buffer overflow in GSM SIM Editor 5.15.
          When opening a specially crafted .sms file in GSM SIM Editor a stack-based buffer
          overflow occurs which allows an attacker to execute arbitrary code.
Metasploit Module: Subtitle Processor 7.7.1 .M3U SEH Unicode Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/subtitle_processor_m3u_bof.rb
Platform: win
Disclosure date: 2011-04-26
References: CVE-2011-10025, OSVDB-72050, EDB-17217, URL-http://sourceforge.net/projects/subtitleproc/

Description:
This module exploits a vulnerability found in Subtitle Processor 7.  By
          supplying a long string of data as a .m3u file, Subtitle Processor first converts
          this input in Unicode, which expands the string size, and then attempts to copy it
          inline on the stack.  This results a buffer overflow with SEH overwritten, allowing
          arbitrary code execution.
Metasploit Module: Malicious Windows Script Host JScript (.js) File
Type: exploit
Path: modules/exploits/windows/fileformat/windows_script_host_jscript.rb
Platform: win
Disclosure date: 1998-06-25

Description:
This module creates a Windows Script Host (WSH) JScript (.js) file.
Metasploit Module: Real Networks Netzip Classic 7.5.1 86 File Parsing Buffer Overflow Vulnerability
Type: exploit
Path: modules/exploits/windows/fileformat/real_networks_netzip_bof.rb
Disclosure date: 2011-01-30
References: CVE-2011-10016, OSVDB-83436, EDB-16083, BID-46059, URL-http://proforma.real.com

Description:
This module exploits a stack-based buffer overflow vulnerability in
          version 7.5.1 86 of Real Networks Netzip Classic.
          In order for the command to be executed, an attacker must convince someone to
          load a specially crafted zip file with NetZip Classic.
          By doing so, an attacker can execute arbitrary code as the victim user.
Metasploit Module: Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/total_video_player_ini_bof.rb
Platform: win
Disclosure date: 2013-11-24
References: CVE-2009-0261, OSVDB-100619, EDB-29799

Description:
This module exploits a buffer overflow in Total Video Player 1.3.1. The vulnerability
          occurs opening malformed Settings.ini file e.g. "C:\Program Files\Total Video Player\".
          This module has been tested successfully on Windows WinXp-Sp3-EN, Windows 7, and Windows 8.
Metasploit Module: Malicious Windows Registration Entries (.reg) File
Type: exploit
Path: modules/exploits/windows/fileformat/windows_registration_entries.rb
Platform: win
Disclosure date: 1995-08-24
References: URL-https://support.microsoft.com/en-us/topic/how-to-add-modify-or-delete-registry-subkeys-and-values-by-using-a-reg-file-9c7f37cf-a5e9-e1cd-c4fa-2a26218a1a23, URL-https://learn.microsoft.com/en-us/windows/win32/setupapi/run-and-runonce-registry-keys, URL-https://learn.microsoft.com/en-us/windows-hardware/drivers/install/runonce-registry-key

Description:
This module creates a Windows Registration Entries (.reg) file which
          adds the specified payload to the Windows Registry. The payload runs
          upon Windows login for the current user. If the user has elevated
          privileges when opening the file, the payload will run upon login
          when any user logs in.

          The user will receive a warning prompt to confirm Registry changes
          when opening the file.
Metasploit Module: Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/foxit_reader_launch.rb
Platform: win
Disclosure date: 2009-03-09
References: CVE-2009-0837, OSVDB-55614, BID-34035, URL-http://www.coresecurity.com/content/foxit-reader-vulnerabilities

Description:
This module exploits a buffer overflow in Foxit Reader 3.0 builds 1301 and earlier.
          Due to the way Foxit Reader handles the input from an "Launch" action, it is possible
          to cause a stack-based buffer overflow, allowing an attacker to gain arbitrary code
          execution under the context of the user.
Metasploit Module: Dup Scout Enterprise v10.4.16 - Import Command Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/dupscout_xml.rb
Platform: win
Disclosure date: 2017-03-29
References: CVE-2017-7310

Description:
This module exploits a buffer overflow in Dup Scout Enterprise v10.4.16
          by using the import command option to import a specially crafted xml file.
Metasploit Module: Adobe Collab.getIcon() Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_geticon.rb
Platform: win
Disclosure date: 2009-03-24
References: CVE-2009-0927, OSVDB-53647, ZDI-09-014

Description:
This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat.
          Affected versions include < 7.1.1, < 8.1.3, and < 9.1. By creating a specially
          crafted pdf that a contains malformed Collab.getIcon() call, an attacker may
          be able to execute arbitrary code.
Metasploit Module: Free Download Manager Torrent Parsing Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/fdm_torrent.rb
Platform: win
Disclosure date: 2009-02-02
References: CVE-2009-0184, OSVDB-54033, BID-33555, URL-http://freedownload.svn.sourceforge.net/viewvc/freedownload/FDM/vmsBtDownloadManager.cpp?r1=11&r2=18, URL-http://freedownload.svn.sourceforge.net/viewvc/freedownload/FDM/Bittorrent/fdmbtsupp/vmsBtFileImpl.cpp?r1=9&r2=18, URL-http://web.archive.org/web/[PII_REDACTED]5829/http://secunia.com:80/secunia_research/2009-5, URL-http://downloads.securityfocus.com/vulnerabilities/exploits/33555-SkD.pl

Description:
This module exploits a stack buffer overflow in Free Download Manager
          3.0 Build 844. Arbitrary code execution could occur when parsing a
          specially crafted torrent file.
Metasploit Module: MJM Core Player 2011 .s3m Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/mjm_coreplayer2011_s3m.rb
Platform: win
Disclosure date: 2011-04-30
References: CVE-2011-10024, OSVDB-72101, URL-http://www.corelan.be/advisories.php?id=CORELAN-11-004

Description:
This module exploits a stack buffer overflow in MJM Core Player 2011
          When opening a malicious s3m file in this application, a stack buffer overflow can be
          triggered, resulting in arbitrary code execution.
          This exploit bypasses DEP & ASLR, and works on XP, Vista & Windows 7.
Metasploit Module: Malicious Windows Script Host Script File (.wsf)
Type: exploit
Path: modules/exploits/windows/fileformat/windows_script_host_wsf.rb
Platform: win
Disclosure date: 1998-06-25

Description:
This module creates a Windows Script Host (WSH) Windows Script File (.wsf).
Metasploit Module: Adobe Collab.collectEmailInfo() Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_collectemailinfo.rb
Platform: win
Disclosure date: 2008-02-08
References: CVE-2007-5659, OSVDB-41495

Description:
This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat Professional 8.1.1.
          By creating a specially crafted pdf that a contains malformed Collab.collectEmailInfo() call,
          an attacker may be able to execute arbitrary code.
Metasploit Module: BulletProof FTP Client BPS Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/bpftp_client_bps_bof.rb
Platform: win
Disclosure date: 2014-07-24
References: EDB-34162, EDB-34540, EDB-35449, OSVDB-109547, CVE-2014-2973

Description:
This module exploits a stack-based buffer overflow vulnerability in
          BulletProof FTP Client 2010, caused by an overly long hostname.

          By persuading the victim to open a specially-crafted .BPS file, a
          remote attacker could execute arbitrary code on the system or cause
          the application to crash. This module has been tested successfully on
          Windows XP SP3.
Metasploit Module: Microsoft Office CVE-2017-11882
Type: exploit
Path: modules/exploits/windows/fileformat/office_ms17_11882.rb
Platform: win
Disclosure date: 2017-11-15
Authors: mumbai
References: CVE-2017-11882, URL-http://web.archive.org/web/[PII_REDACTED]0500/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about, URL-https://github.com/embedi/CVE-2017-11882

Description:
Module exploits a flaw in how the Equation Editor that
          allows an attacker to execute arbitrary code in RTF files without
          interaction. The vulnerability is caused by the Equation Editor,
          to which fails to properly handle OLE objects in memory.
Metasploit Module: OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/openoffice_ole.rb
Platform: win
Disclosure date: 2008-04-17
References: CVE-2008-0320, OSVDB-44472, BID-28819, EDB-5584, URL-http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=694

Description:
This module exploits a vulnerability in OpenOffice 2.3.1 and 2.3.0 on
          Microsoft Windows XP SP3.

          By supplying a OLE file with a malformed DocumentSummaryInformation stream, an
          attacker can gain control of the execution flow, which results arbitrary code
          execution under the context of the user.
Metasploit Module: Adobe Flash Player "Button" Remote Code Execution
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_flashplayer_button.rb
Platform: win
Disclosure date: 2010-10-28
References: CVE-2010-3654, OSVDB-68932, BID-44504, URL-http://www.adobe.com/support/security/advisories/apsa10-05.html, URL-http://blog.fortinet.com/fuzz-my-life-flash-player-zero-day-vulnerability-cve-2010-3654/, URL-http://feliam.wordpress.com/2010/02/11/flash-on-a-pdf-with-minipdf-py/

Description:
This module exploits a vulnerability in the handling of certain SWF movies
          within versions 9.x and 10.0 of Adobe Flash Player. Adobe Reader and Acrobat
          are also vulnerable, as are any other applications that may embed Flash player.

          Arbitrary code execution is achieved by embedding a specially crafted Flash
          movie into a PDF document. An AcroJS heap spray is used in order to ensure
          that the memory used by the invalid pointer issue is controlled.

          NOTE: This module uses a similar DEP bypass method to that used within the
          adobe_libtiff module. This method is unlikely to work across various
          Windows versions due to a hardcoded syscall number.
Metasploit Module: VLC Media Player RealText Subtitle Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/vlc_realtext.rb
Platform: win
Disclosure date: 2008-11-05
References: OSVDB-49809, CVE-2008-5036, BID-32125, URL-http://www.trapkit.de/advisories/TKADV2008-011.txt, URL-http://www.videolan.org/security/sa0810.html

Description:
This module exploits a stack buffer overflow vulnerability in
          VideoLAN VLC < 0.9.6. The vulnerability exists in the parsing of
          RealText subtitle files.

          In order to exploit this, this module will generate two files:
          The .mp4 file is used to trick your victim into running. The .rt file
          is the actual malicious file that triggers the vulnerability, which
          should be placed under the same directory as the .mp4 file.
Metasploit Module: Adobe Reader ToolButton Use After Free
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_toolbutton.rb
Platform: win
Disclosure date: 2013-08-08
References: CVE-2013-3346, OSVDB-96745, ZDI-13-212, URL-http://www.adobe.com/support/security/bulletins/apsb13-15.html, URL-http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html

Description:
This module exploits a use after free condition on Adobe Reader versions 11.0.2, 10.1.6
          and 9.5.4 and prior. The vulnerability exists while handling the ToolButton object, where
          the cEnable callback can be used to early free the object memory. Later use of the object
          allows triggering the use after free condition. This module has been tested successfully
          on Adobe Reader 11.0.2, 10.0.4 and 9.5.0 on Windows XP SP3, as exploited in the wild in
          November, 2013.
Metasploit Module: Boxoft WAV to MP3 Converter v1.1 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/boxoft_wav_to_mp3.rb
Platform: win
Disclosure date: 2015-08-31
References: CVE-2015-7243, EDB-38035

Description:
This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter versions 1.0 and 1.1.
          By constructing a specially crafted WAV file and attempting to convert it to an MP3 file in the
          application, a buffer is overwritten, which allows for running shellcode.
Metasploit Module: BlazeDVD 6.1 PLF Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/blazedvd_plf.rb
Platform: win
Disclosure date: 2009-08-03
Authors: MC
References: CVE-2006-6199, EDB-32737, OSVDB-30770, BID-35918

Description:
This module exploits a stack over flow in BlazeDVD 5.1 and 6.2. When
          the application is used to open a specially crafted plf file,
          a buffer is overwritten allowing for the execution of arbitrary code.
Metasploit Module: MPlayer Lite M3U Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/mplayer_m3u_bof.rb
Platform: win
Disclosure date: 2011-03-19
References: CVE-2011-10008, BID-46926, EDB-17013, URL-http://www.mplayer-ww.com/eng/

Description:
This module exploits a stack-based buffer overflow vulnerability in
          MPlayer Lite r33064, caused by improper bounds checking of an URL entry.

          By persuading the victim to open a specially-crafted .M3U file, specifically by
          drag-and-dropping it to the player, a remote attacker can execute arbitrary
          code on the system.
Metasploit Module: RARLAB WinRAR ACE Format Input Validation Remote Code Execution
Type: exploit
Path: modules/exploits/windows/fileformat/winrar_ace.rb
Platform: win
Disclosure date: 2019-02-05
References: CVE-2018-20250, EDB-46552, BID-106948, URL-https://research.checkpoint.com/extracting-code-execution-from-winrar/, URL-https://apidoc.roe.ch/acefile/latest/, URL-http://www.hugi.scene.org/online/coding/hugi%2012%20-%20coace.htm

Description:
In WinRAR versions prior to and including 5.61, there is path traversal vulnerability
          when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename
          field is manipulated with specific patterns, the destination (extraction) folder is
          ignored, thus treating the filename as an absolute path. This module will attempt to
          extract a payload to the startup folder of the current user. It is limited such that
          we can only go back one folder. Therefore, for this exploit to work properly, the user
          must extract the supplied RAR file from one folder within the user profile folder
          (e.g. Desktop or Downloads). User restart is required to gain a shell.
Metasploit Module: CyberLink LabelPrint 2.5 Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/cyberlink_lpp_bof.rb
Platform: win
Disclosure date: 2017-09-23
References: CVE-2017-14627, EDB-42777

Description:
This module exploits a stack buffer overflow in CyberLink LabelPrint 2.5 and below.
          The vulnerability is triggered when opening a .lpp project file containing overly long string characters
          via open file menu. This results in overwriting a structured exception handler record and take over the
          application. This module has been tested on Windows 7 (64 bit), Windows 8.1 (64 bit), and Windows 10 (64 bit).
Metasploit Module: AstonSoft DeepBurner (DBR File) Path Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/deepburner_path.rb
Platform: win
Disclosure date: 2006-12-19
References: BID-21657, OSVDB-32356, CVE-2006-6665, EDB-2950, EDB-8335, EDB-11315

Description:
This module exploits a stack-based buffer overflow in versions 1.9.0.228,
          1.8.0, and possibly other versions of AstonSoft's DeepBurner (Pro, Lite, etc).
          An attacker must send the file to victim and the victim must open the file.
          Alternatively it may be possible to execute code remotely via an embedded
          DBR file within a browser, since the DBR extension is registered to DeepBurner.
Metasploit Module: Watermark Master Buffer Overflow (SEH)
Type: exploit
Path: modules/exploits/windows/fileformat/watermark_master.rb
Platform: win
Disclosure date: 2013-11-01
References: OSVDB-99226, CVE-2013-6935, EDB-29327

Description:
This module exploits a stack based buffer overflow in Watermark Master 2.2.23 when
          processing a specially crafted .WCF file. This vulnerability could be
          exploited by a remote attacker to execute arbitrary code on the target
          machine by enticing a user of Watermark Master to open a malicious .WCF file.
Metasploit Module: Shadow Stream Recorder 3.0.1.7 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/shadow_stream_recorder_bof.rb
Platform: win
Disclosure date: 2010-03-29
References: CVE-2009-1641, OSVDB-81487, EDB-11957, BID-34864

Description:
This module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7.
          Using the application to open a specially crafted asx file, a buffer
          overflow may occur to allow arbitrary code execution under the context
          of the user.
Metasploit Module: Apple QuickTime TeXML Style Element Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/apple_quicktime_texml.rb
Platform: win
Disclosure date: 2012-05-15
References: OSVDB-81934, CVE-2012-0663, BID-53571, ZDI-12-107, URL-http://0x1byte.blogspot.com/2012/06/cve-2012-0663-and-cve-2012-0664-samples.html, URL-http://support.apple.com/kb/HT1222

Description:
This module exploits a vulnerability found in Apple QuickTime. When handling
          a TeXML file, it is possible to trigger a stack-based buffer overflow, and then
          gain arbitrary code execution under the context of the user.  This is due to the
          QuickTime3GPP.gtx component not handling certain Style subfields properly, storing
          user-supplied data on the stack, which results the overflow.
Metasploit Module: MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability
Type: exploit
Path: modules/exploits/windows/fileformat/ms09_067_excel_featheader.rb
Platform: win
Disclosure date: 2009-11-10
References: CVE-2009-3129, OSVDB-59860, MSB-MS09-067, BID-36945, ZDI-09-083, URL-http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=832

Description:
This module exploits a vulnerability in the handling of the FEATHEADER record
          by Microsoft Excel. Revisions of Office XP and later prior to the release of the
          MS09-067 bulletin are vulnerable.

          When processing a FEATHEADER (Shared Feature) record, Microsoft used a data
          structure from the file to calculate a pointer offset without doing proper
          validation. Attacker supplied data is then used to calculate the location of an
          object, and in turn a virtual function call. This results in arbitrary code
          execution.

          NOTE: On some versions of Office, the user will need to dismiss a warning dialog
          prior to the payload executing.
Metasploit Module: Media Jukebox 8.0.400 Buffer Overflow (SEH)
Type: exploit
Path: modules/exploits/windows/fileformat/mediajukebox.rb
Platform: win
Disclosure date: 2009-07-01
References: OSVDB-55924, CVE-2009-2650

Description:
This module exploits a stack buffer overflow in Media Jukebox 8.0.400
          by creating a specially crafted m3u or pls file.
Metasploit Module: Adobe PDF Embedded EXE Social Engineering
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_pdf_embedded_exe.rb
Platform: win
Disclosure date: 2010-03-29
References: CVE-2010-1240, OSVDB-63667, URL-http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/, URL-http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/, URL-http://blog.didierstevens.com/2010/03/29/escape-from-pdf/, URL-http://www.adobe.com/support/security/bulletins/apsb10-15.html

Description:
This module embeds a Metasploit payload into an existing PDF file. The
          resulting PDF can be sent to a target as part of a social engineering attack.
Metasploit Module: CA Antivirus Engine CAB Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/ca_cab.rb
Platform: win
Disclosure date: 2007-06-05
References: CVE-2007-2864, OSVDB-35245, BID-24330, ZDI-07-035

Description:
This module exploits a stack buffer overflow in CA eTrust Antivirus 8.1.637.
          By creating a specially crafted CAB file, an attacker may be able
          to execute arbitrary code.