Lucene search
HistoryMay 20, 2024 - 2:15 p.m.
CVE-2024-34952
taurusxin ncmdump
segmentation violation
neteasecrypt
fixmetadata
denial of service
dos
crafted file
AI Score
6.7
Confidence
High
taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted .ncm file.
References
github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.assets/debug-coredump.png
github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.md
github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/poc/I1DWE0~U
github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_FixMetadata
github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_FixMetadata/poc
github.com/taurusxin/ncmdump/issues/18
Related
cvelist
cvelist
CVE-2024-34952
1976-01-01 00:00:00
vulnrichment
vulnrichment
CVE-2024-34952
1976-01-01 00:00:00
cve
cve
CVE-2024-34952
2024-05-20 14:15:09