Stack overflow

Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a playlist file .pls containing a long string. NOTE: some of these...

CVE-2009-4656

Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a playlist file .pls containing a long string. NOTE: some of these...

CVE-2009-4656

DJ Studio Pro 4.2 (incl. 4.2.2.7.5) and 5.x (incl. 5.1.4.3.1) are affected by a stack-based buffer overflow in the .pls playlist handling. The root cause is insufficient bounds checking on a playlist file, allowing a long string to overflow the stack and crash the application or potentially execu...

CVE-2009-4656

Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a playlist file .pls containing a long string. NOTE: some of these...

CVE-2009-4656: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a playlist file .pls containing a long string. NOTE: some of these...

DJ Studio Pro 5.1.6.5.2 Stack Overflow

!/usr/bin/perl Usage--file created--load file--b00m.pls BOOM print "\n"; print "! DJ Studio Pro 5.1.6.5.2 .pls Local Stack Overflow Exploit\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1500; my $filename = "b00m.pls"; open...

DJ Studio Pro 5.1.6.5.2 SEH Overwrite

!/usr/bin/perl DJ Studio Pro 5.1.6.5.2 SEH Overwrite Exploit Written By Rehan Ahmed [email protected] Vulnerability Discovered By Prodigy Software Link : http://www.e-soft.co.uk/ Tested on : Windows XP SP2 En OSVDB ID : 58159 my $file = "owned.pls"; my $junk = "A" x 1308; my $nextseh =...

[CORELAN-10-001] Audiotran 1.4.1 buffer overflow

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

DJ Studio Pro 5.1 .pls Stack Buffer Overflow

This module exploits a stack-based buffer overflow in DJ Studio Pro 5.1.6.5.2. When handling a .pls file, DJ Studio will copy the user-supplied data on the stack without any proper bounds checking done beforehand, therefore allowing code execution under the context of the user. Module Options msf...

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

DJ Studio Pro 5.1.6.5.2 - Local Overflow SEH !/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow...

DJ Studio Pro 5.1.6.5.2 SEH Exploit

Exploit for unknown platform in category local exploits =================================== DJ Studio Pro 5.1.6.5.2 SEH Exploit =================================== Title: DJ Studio Pro 5.1.6.5.2 SEH Exploit CVE-ID: OSVDB-ID: Author: Sebastien Duquette Published: 2009-12-30 Verified: yes view sour...

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

!/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow originally discovered by prodigy exec calc.exe...

DJ Studio Pro 4.2 Crash

!/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and boooom! Platform: Windows ==PoC== use...

DJ Studio Pro 4.2 (.PLS file) Local Crash Exploit

No description provided by source. !/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and...

DJ Studio Pro 4.2 - .pls Local Crash

DJ Studio Pro 4.2 - .pls Local Crash !/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and...

DJ Studio Pro 4.2 (.PLS file) Local Crash Exploit

Exploit for unknown platform in category dos / poc ================================================= DJ Studio Pro 4.2 .PLS file Local Crash Exploit ================================================= !/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by...

DJ Studio Pro 4.2 - '.pls' Local Crash

!/usr/bin/perl -w DJ Studio Pro 4.2 .PLS file Crash Vulnerability Exploit Founded and exploited by prodigy Contact: [email protected] Vendor: http://www.e-soft.co.uk/ Usage to reproduce the bug: when you created the malicious file, load the file and boooom! Platform: Windows ==PoC== use...

CVE-2002-1780

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service crash by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Window...

CVE-2002-1780

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that enables a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. The note indicates that some of these application-level DOS device issues may stem from a Windows bug, and the pro...

CVE-2002-1780: Undefined Security Weakness

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service crash by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Window...