J. River Media Jukebox 12 MP3 File Handling Remote Heap Overflow PoC

Media Jukebox 12 is a media player application for playing various media files on a Windows machine.

Desc: Media Jukebox 12 suffers from a heap overflow vulnerability when processing .mp3 files and its metadata (ID3 tags). When a malicious .mp3 file is played the application pops out an error message and crashes. The ECX register gets overwritten allowing the attacker the possibility of system access remotely or localy.

More Info: http://zeroscience.mk/mk/vulnerabilities/ZSL-2010-4930.php

Comment are closed.