CVE-2008-0747

Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487...

CVE-2008-0747

The CVE-2008-0747 entry describes a stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier. The vulnerability allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file. Root cause is a overflow in processing the URL data, leading to potential a...

CVE-2008-0747: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487...

jetAudio buffer overflow

Buffer overflow on oversized ASX file URI...

jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow

Application: jetAudio 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits...

jetAudio 7.0.5 - .asx Remote Stack Overflow (PoC)

jetAudio 7.0.5 - .asx Remote Stack Overflow PoC Application: jetAudio = 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1...

jetaudioasx-overflow.txt

Application: jetAudio 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits...

jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ========================================================== jetAudio = 7.0.5 .ASX Remote Stack Overflow Exploit PoC ========================================================== Application: jetAudio = 7.0.5 .ASX Remote Stack Overflow Web Site:...

jetAudio 7.0.5 - '.asx' Remote Stack Overflow (PoC)

Application: jetAudio $file" or die "Cannot open $file: $!"; print $FILE "http://".$payload; close$FILE; print "$file has been created \n"; ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom milw0rm.com 2008-02-08...

jetaudio-overflow.txt

another vulnerable application. !/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here: hxxp://www.3ivx.com/codec/3ivxMPEG-4501trialwin.exe - play th...

jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow Exploit ============================================================ !/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack...

jetAudio 7.0.5 COWON Media Center MP4 - Local Stack Overflow

jetAudio 7.0.5 COWON Media Center MP4 - Local Stack Overflow !/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here:...

jetAudio 7.0.5 COWON Media Center MP4 - Local Stack Overflow

!/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here: hxxp://www.3ivx.com/codec/3ivxMPEG-4501trialwin.exe - play the AVI file with COWON Media Cent...

CVE-2007-5487

CVE-2007-5487 describes a stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 that can be triggered by a crafted URL in an EXTM3U section of an .m3u file. The underlying cause is a stack-based overflow allowing user-assisted remote attackers to execute arbitrary code on affected sys...

CVE-2007-5487: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file...

jetaudio-local.txt

!/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u = "EXTM3U\nhttp://%s" shellcode =...

jetAudio 7.x (m3u File) Local SEH Overwrite Exploit

No description provided by source. !/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc metasploit.com Just for fun ; from struct...

jetAudio 7.x - .m3u Local Overwrite (SEH)

jetAudio 7.x - .m3u Local Overwrite SEH !/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u =...

jetAudio 7.x - '.m3u' Local Overwrite (SEH)

!/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u = "EXTM3U\nhttp://%s" shellcode =...

jetAudio 7.x (m3u File) Local SEH Overwrite Exploit

Exploit for unknown platform in category local exploits =================================================== jetAudio 7.x m3u File Local SEH Overwrite Exploit =================================================== !/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered ...