{"id": "CVE-2008-5072", "bulletinFamily": "NVD", "title": "CVE-2008-5072", "description": "vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV file.", "published": "2008-11-14T18:07:00", "modified": "2017-09-29T01:32:00", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5072", "reporter": "cve@mitre.org", "references": ["http://securityreason.com/securityalert/4588", "https://www.exploit-db.com/exploits/6565", "http://packetstormsecurity.org/filedesc/klite-dos-tgz.html", "http://www.securityfocus.com/bid/31400", "https://exchange.xforce.ibmcloud.com/vulnerabilities/45446"], "cvelist": ["CVE-2008-5072"], "type": "cve", "lastseen": "2019-05-29T18:09:29", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "45b434427440ffa5e11ad5e6b0005c04"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "8e965dcd6aa844531183ef36dd044161"}, {"key": "cpe23", "hash": "27c47c307a45812c8b5532829374143e"}, {"key": "cvelist", "hash": "406ad06e4e09949c09bdab459382ebe1"}, {"key": "cvss", "hash": "741b18e744e3f37108cd8c3f4a1c6ef7"}, {"key": "cvss2", "hash": "497bc610268b9555b01688437435adc2"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "d370d473ba1bd1721d669ef98e2aeebb"}, {"key": "description", "hash": "7b1b08fbca3153bd6d326a8347705e8d"}, {"key": "href", "hash": "d6faf35ddce12c29bd0125b68f78622e"}, {"key": "modified", "hash": "43dd24ddc80228cca727a2ae69707805"}, {"key": "published", "hash": "de175cae68c661cfd62c3ffcc76728c1"}, {"key": "references", "hash": "977cff7d42be90d1e00e934260029dd1"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "5f02fa2b87f81779b2a1d052d51397fa"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "0db23951eec0a04d812fbc2b8d22e3a38c0724a1e7b28a3c3bb797432bf46f6e", "viewCount": 0, "enchantments": {"score": {"value": 5.3, "vector": "NONE", "modified": "2019-05-29T18:09:29"}, "dependencies": {"references": [{"type": "openvas", "idList": ["OPENVAS:800139", "OPENVAS:1361412562310800139"]}, {"type": "exploitdb", "idList": ["EDB-ID:6565"]}], "modified": "2019-05-29T18:09:29"}, "vulnersScore": 5.3}, "objectVersion": "1.3", "cpe": ["cpe:/a:k-lite:mega_codec_pack:3.5.7.0"], "affectedSoftware": [{"name": "k-lite mega_codec_pack", "operator": "eq", "version": "3.5.7.0"}], "cvss2": {"cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {}, "cpe23": ["cpe:2.3:a:k-lite:mega_codec_pack:3.5.7.0:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-noinfo"]}

{"openvas": [{"lastseen": "2017-07-02T21:10:08", "bulletinFamily": "scanner", "description": "This host is installed with K-Lite Mega Codec Pack and is prone to\n Denial Of Service Vulnerability.", "modified": "2017-02-20T00:00:00", "published": "2008-11-21T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=800139", "id": "OPENVAS:800139", "title": "K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_klite_mega_codec_dos_vuln.nasl 5370 2017-02-20 15:24:26Z cfi $\n#\n# K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability\n#\n# Authors:\n# Veerendra GG <veerendragg@secpod.com>\n#\n# Copyright:\n# Copyright (c) 2008 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ntag_affected = \"K-Lite Mega Codec Pack 3.5.7.0 and earlier on Windows (Any).\n\n *****\n NOTE : Some Higher Versions of K-Lite Mega Codec Pack seems to be\n also vulnerable.\n *****\";\n\ntag_impact = \"By tricking a user to interact with a specially crafted .flv file,\n attackers can cause Windows Explorer to crash.\n Impact Level: System\";\ntag_insight = \"The flaw is due to error in vsfilter.dll file, which fails to properly\n validate the input data.\";\ntag_solution = \"No solution or patch was made available for at least one year\nsince disclosure of this vulnerability. Likely none will be provided anymore.\nGeneral solution options are to upgrade to a newer release, disable respective\nfeatures, remove the product or replace the product by another one.\nFor updates refer to http://www.codecguide.com/download_mega.htm\";\ntag_summary = \"This host is installed with K-Lite Mega Codec Pack and is prone to\n Denial Of Service Vulnerability.\";\n\nif(description)\n{\n script_id(800139);\n script_version(\"$Revision: 5370 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-02-20 16:24:26 +0100 (Mon, 20 Feb 2017) $\");\n script_tag(name:\"creation_date\", value:\"2008-11-21 14:18:03 +0100 (Fri, 21 Nov 2008)\");\n script_tag(name:\"cvss_base\", value:\"4.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:P\");\n script_cve_id(\"CVE-2008-5072\");\n script_bugtraq_id(31400);\n script_name(\"K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability\");\n script_xref(name : \"URL\" , value : \"http://www.milw0rm.com/exploits/6565\");\n script_xref(name : \"URL\" , value : \"http://xforce.iss.net/xforce/xfdb/45446\");\n\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"qod_type\", value:\"executable_version_unreliable\");\n script_copyright(\"Copyright (C) 2008 Greenbone Networks GmbH\");\n script_family(\"Denial of Service\");\n script_dependencies(\"secpod_reg_enum.nasl\");\n script_mandatory_keys(\"SMB/WindowsVersion\");\n script_require_ports(139, 445);\n script_tag(name : \"impact\" , value : tag_impact);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name:\"solution_type\", value:\"WillNotFix\");\n exit(0);\n}\n\n\ninclude(\"smb_nt.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(!get_kb_item(\"SMB/WindowsVersion\")){\n exit(0);\n}\n\nklitePath = registry_get_sz(key:\"SOFTWARE\\KLCodecPack\", item:\"installdir\");\nif(!klitePath){\n exit(0);\n}\n\nklitePath += \"\\Filters\\vsfilter.dll\";\n\nshare = ereg_replace(pattern:\"([A-Z]):.*\", replace:\"\\1$\", string:klitePath);\nfile = ereg_replace(pattern:\"[A-Z]:(.*)\", replace:\"\\1\", string:klitePath);\n\nkliteVer = GetVer(file:file, share:share);\nif(!kliteVer){\n exit(0);\n}\n\n# Check for K-Lite Mega Codec Pack File Version (vsfilter.dll) < 1.0.1.5\nif(version_is_less(version:kliteVer, test_version:\"1.0.1.5\")){\n security_message(0);\n}\n", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:40:26", "bulletinFamily": "scanner", "description": "This host is installed with K-Lite Mega Codec Pack and is prone to\n Denial Of Service Vulnerability.", "modified": "2018-11-30T00:00:00", "published": "2008-11-21T00:00:00", "id": "OPENVAS:1361412562310800139", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310800139", "title": "K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_klite_mega_codec_dos_vuln.nasl 12602 2018-11-30 14:36:58Z cfischer $\n#\n# K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability\n#\n# Authors:\n# Veerendra GG <veerendragg@secpod.com>\n#\n# Copyright:\n# Copyright (c) 2008 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.800139\");\n script_version(\"$Revision: 12602 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-30 15:36:58 +0100 (Fri, 30 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2008-11-21 14:18:03 +0100 (Fri, 21 Nov 2008)\");\n script_tag(name:\"cvss_base\", value:\"4.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:N/I:N/A:P\");\n script_cve_id(\"CVE-2008-5072\");\n script_bugtraq_id(31400);\n script_name(\"K-Lite Mega Codec Pack vsfilter.dll Denial Of Service Vulnerability\");\n script_xref(name:\"URL\", value:\"http://www.milw0rm.com/exploits/6565\");\n script_xref(name:\"URL\", value:\"http://xforce.iss.net/xforce/xfdb/45446\");\n\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"qod_type\", value:\"executable_version_unreliable\");\n script_copyright(\"Copyright (C) 2008 Greenbone Networks GmbH\");\n script_family(\"Denial of Service\");\n script_dependencies(\"smb_reg_service_pack.nasl\");\n script_mandatory_keys(\"SMB/WindowsVersion\");\n script_require_ports(139, 445);\n script_tag(name:\"impact\", value:\"By tricking a user to interact with a specially crafted .flv file,\n attackers can cause Windows Explorer to crash.\");\n script_tag(name:\"insight\", value:\"The flaw is due to error in vsfilter.dll file, which fails to properly\n validate the input data.\");\n script_tag(name:\"solution\", value:\"No known solution was made available for at least one year since the disclosure\n of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer\n release, disable respective features, remove the product or replace the product by another one.\");\n script_tag(name:\"summary\", value:\"This host is installed with K-Lite Mega Codec Pack and is prone to\n Denial Of Service Vulnerability.\");\n script_tag(name:\"affected\", value:\"K-Lite Mega Codec Pack 3.5.7.0 and earlier on Windows (Any).\n\n *****\n NOTE : Some Higher Versions of K-Lite Mega Codec Pack seems to be\n also vulnerable.\n *****\");\n script_tag(name:\"solution_type\", value:\"WillNotFix\");\n script_xref(name:\"URL\", value:\"http://www.codecguide.com/download_mega.htm\");\n exit(0);\n}\n\n\ninclude(\"smb_nt.inc\");\ninclude(\"version_func.inc\");\ninclude(\"secpod_smb_func.inc\");\n\nif(!get_kb_item(\"SMB/WindowsVersion\")){\n exit(0);\n}\n\nklitePath = registry_get_sz(key:\"SOFTWARE\\KLCodecPack\", item:\"installdir\");\nif(!klitePath){\n exit(0);\n}\n\nklitePath += \"\\Filters\\vsfilter.dll\";\n\nshare = ereg_replace(pattern:\"([A-Z]):.*\", replace:\"\\1$\", string:klitePath);\nfile = ereg_replace(pattern:\"[A-Z]:(.*)\", replace:\"\\1\", string:klitePath);\n\nkliteVer = GetVer(file:file, share:share);\nif(!kliteVer){\n exit(0);\n}\n\nif(version_is_less(version:kliteVer, test_version:\"1.0.1.5\")){\n security_message( port: 0, data: \"The target host was found to be vulnerable\" );\n}\n", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P"}}], "exploitdb": [{"lastseen": "2016-02-01T00:08:20", "bulletinFamily": "exploit", "description": "K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC. CVE-2008-5072. Dos exploit for windows platform", "modified": "2008-09-25T00:00:00", "published": "2008-09-25T00:00:00", "id": "EDB-ID:6565", "href": "https://www.exploit-db.com/exploits/6565/", "type": "exploitdb", "title": "K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer DoS PoC", "sourceData": "K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC.\r\nVersion:3.5.7.0\r\n\r\n\"vsfilter.dll\"(Version 1.0.1.4) that comes bundled with the above Codec Pack\r\ncrashes when we try to use,select or even highlight the\r\nattached \"Test7.flv\" file in Windows Explorer,causing Explorer\r\nto Crash.\r\n\r\n\r\n\r\nGreetz fly out to:\r\n1]LiquidWorm : For being so nice.....n guiding me.. :)\r\n2]str0ke : For goin thru all my silly e-mails.\r\n3]Amforked() : My mentor.\r\n------------------------------------------------------------------\r\nBy: Aodrulez, \r\n www.OrchidSeven.com, \r\n aodrulez.blogspot.com.\r\n\r\nEmail: f3arm3d3ar@gmail.com\r\n------------------------------------------------------------------\r\n\r\nhttps://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/6565.rar (2008-test7.rar)\r\n\r\n# milw0rm.com [2008-09-25]\r\n", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/6565/"}]}