vendor:
Mediamonkey
by:
0v3r
7,5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Mediamonkey
Affected Version From: 3.2.4.1304
Affected Version To: 3.2.4.1304
Patch Exists: YES
Related CWE: N/A
CPE: a:ventis_media:mediamonkey
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3 EN
2010
Mediamonkey 3.2.4.1304 (mp3) Buffer Overflow Vulnerability PoC
A buffer overflow vulnerability exists in Mediamonkey 3.2.4.1304, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially allow the execution of arbitrary code. The vulnerability is caused due to a boundary error when processing MP3 files with an overly long string. This can be exploited to cause a stack-based buffer overflow via an overly long string passed to a specially crafted MP3 file.
Mitigation:
Upgrade to the latest version of Mediamonkey 3.2.4.1304 or later.