Dumb <= 0.9.3 (it_read_envelope) Remote Heap Overflow PoC

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER 0.1 define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME proof-of-concept void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int...

DUMB: Heap buffer overflow

Background DUMB Dynamic Universal Music Bibliotheque is an IT, XM, S3M and MOD player library. Description Luigi Auriemma found a heap-based buffer overflow in the itreadenvelope function which reads the envelope values for volume, pan and pitch of the instruments referenced in a ".it" Impulse...

Dumb <= 0.9.3 (it_read_envelope) Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= Dumb include include include define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void...

Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)

/ by Luigi Auriemma / include include include include define VER "0.1" define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME "proof-of-concept" void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwb08FILE fd, int num; void fwb16FILE fd, int num; void...

CVE-2006-3668

CVE-2006-3668 describes a heap-based buffer overflow in DUMB (Dynamic Universal Music Bibliotheque) libdumb affecting 0.9.3 and earlier (CVSS shows high impact). The vulnerability occurs in it_read_envelope when parsing IT files with a large number of nodes, potentially allowing arbitrary code ex...

CVE-2006-3668: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...