Zinf Malformed Playlist File Remote Buffer Overflow Vulnerability

Bugtraq ID:	11248
Class:	Boundary Condition Error
CVE:	CVE-2004-0964
Remote:	Yes
Local:	No
Published:	Sep 24 2004 12:00AM
Updated:	Jan 30 2009 07:59PM
Credit:	Discovery is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Zinf Zinf 2.2.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha
Not Vulnerable:

Zinf Malformed Playlist File Remote Buffer Overflow Vulnerability

Zinf is prone to a remote buffer-overflow vulnerability when processing malformed playlist files. This issue occurs because the application fails to perform sufficient boundary checks. An attacker may exploit this issue to gain unauthorized access to a vulnerable computer.

Zinf 2.2.1 for Windows is vulnerable.

NOTE: Zinf 2.2.5 for Linux is reportedly fixed, but this has not been confirmed.

Zinf Malformed Playlist File Remote Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/11248-universal.pl
• /data/vulnerabilities/exploits/zinfMediaWindowsExploitDelikon.c
• /data/vulnerabilities/exploits/11248-Hakxer.pl
• /data/vulnerabilities/exploits/11248-Houssamix.pl

Zinf Malformed Playlist File Remote Buffer Overflow Vulnerability

Solution:
Fixes are available. Please see the references for details.


Debian Linux 3.0 hppa

• Debian freeamp-extras_2.1.1.0-4woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_hppa.deb


• Debian freeamp_2.1.1.0-4woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_hppa.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_hppa.deb

Debian Linux 3.0 ppc

• Debian freeamp-extras_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_powerpc.deb


• Debian freeamp_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_powerpc.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_powerpc.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_powerpc.deb

Debian Linux 3.0 s/390

• Debian freeamp-extras_2.1.1.0-4woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_s390.deb


• Debian freeamp_2.1.1.0-4woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_s390.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_s390.deb

Debian Linux 3.0 arm

• Debian freeamp-extras_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_arm.deb


• Debian freeamp_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_arm.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_arm.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_arm.deb

Debian Linux 3.0 alpha

• Debian freeamp-extras_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_alpha.deb


• Debian freeamp_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_alpha.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_alpha.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_alpha.deb

Debian Linux 3.0 mips

• Debian freeamp-extras_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_mips.deb


• Debian freeamp_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_mips.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_mips.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_mips.deb

Debian Linux 3.0 mipsel

• Debian freeamp-extras_2.1.1.0-4woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_mipsel.deb


• Debian freeamp_2.1.1.0-4woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_mipsel.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_mipsel.deb

Debian Linux 3.0 ia-32

• Debian freeamp-extras_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_i386.deb


• Debian freeamp_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_i386.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_i386.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_i386.deb

Debian Linux 3.0 sparc

• Debian freeamp-extras_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_sparc.deb


• Debian freeamp_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_sparc.deb


• Debian libfreeamp-alsa_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_sparc.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_sparc.deb

Debian Linux 3.0 m68k

• Debian freeamp-extras_2.1.1.0-4woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_m68k.deb


• Debian freeamp_2.1.1.0-4woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_m68k.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_m68k.deb

Debian Linux 3.0 ia-64

• Debian freeamp-extras_2.1.1.0-4woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_ia64.deb


• Debian freeamp_2.1.1.0-4woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_ia64.deb


• Debian libfreeamp-esound_2.1.1.0-4woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_ia64.deb

Zinf Malformed Playlist File Remote Buffer Overflow Vulnerability

References:

• Zinf Homepage (Zinf)
  
• Buffer overflow in Zinf 2.2.1 for Win32 (Luigi Auriemma )