OSVDB ID: 10380

Title: dBpowerAMP Multiple Products Playlist File Overflow

Info

Disclosure

Sep 27, 2004

Discovery

Sep 27, 2004

Dates

Exploit

Sep 27, 2004

Solution

Unknown

Description

A remote overflow exists in dBpowerAMP Music Converter and Audio Player. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted playlist file (*.pls or *.m3u), a remote attacker can cause arbitrary code execution or cause the applications to crash resulting in a loss of integrity and/or availability.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Illustrate

dbPowerAmp Music Converter

10.0

dbPowerAmp Audio Player

2.0

References

Credit

  • James Bercegay - securityBrand New Doo Doogulftech.org - GulfTech Research and Development


Direct URL: http://osvdb.org/36218