rapid7/metasploit-framework

View on GitHub
modules/exploits/windows/fileformat/dvdx_plf_bof.rb

Summary

Maintainability
A
3 hrs
Test Coverage

Method initialize has 55 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info={})
    super(update_info(info,
      'Name'           => "DVD X Player 5.5 .plf PlayList Buffer Overflow",
      'Description'    => %q{
          This module exploits a stack-based buffer overflow on DVD X Player 5.5 Pro and
Severity: Major
Found in modules/exploits/windows/fileformat/dvdx_plf_bof.rb - About 2 hrs to fix

    Method exploit has 32 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def exploit
        rop = [
          0x10011108,  #VirtualProtect IAT [SkinScrollBar.dll]
          0x616306ed,  #MOV EAX, DWORD PTR DS:[EAX]; RET [EPG.dll]
          0x616385d8,  #XCHG EAX,ESI; RETN 0 [EPG.dll]
    Severity: Minor
    Found in modules/exploits/windows/fileformat/dvdx_plf_bof.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status