Michael Kohn Ringtone Tools EMelody File Remote Buffer Overflow Vulnerability
BID:12010
Info
Michael Kohn Ringtone Tools EMelody File Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 12010 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-1292 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2004 12:00AM |
| Updated: | Jul 12 2009 09:26AM |
| Credit: | Discovery is credited to Qiao Zhang. |
| Vulnerable: |
Michael Kohn Ringtone Tools 2.22 Gentoo Linux |
| Not Vulnerable: | |
Discussion
Michael Kohn Ringtone Tools EMelody File Remote Buffer Overflow Vulnerability
Ringtone Tools is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
An attacker can exploit this issue by crafting a malicious eMelody file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
Ringtone Tools version 2.22 is reported prone to this vulnerability. It is likely that other versions are affected as well.
Ringtone Tools is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
An attacker can exploit this issue by crafting a malicious eMelody file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
Ringtone Tools version 2.22 is reported prone to this vulnerability. It is likely that other versions are affected as well.
Exploit / POC
Michael Kohn Ringtone Tools EMelody File Remote Buffer Overflow Vulnerability
A proof of concept example is available:
A proof of concept example is available:
Solution / Fix
Michael Kohn Ringtone Tools EMelody File Remote Buffer Overflow Vulnerability
Solution:
Gentoo has released an advisory (GLSA 200503-18) and an updated eBuild to address this vulnerability. Gentoo users may install these updates by issuing the following sequence of commands as a superuser:
emerge --sync
emerge --ask --oneshot --verbose ">=app-misc/ringtonetools-2.23"
Solution:
Gentoo has released an advisory (GLSA 200503-18) and an updated eBuild to address this vulnerability. Gentoo users may install these updates by issuing the following sequence of commands as a superuser:
emerge --sync
emerge --ask --oneshot --verbose ">=app-misc/ringtonetools-2.23"
References
Michael Kohn Ringtone Tools EMelody File Remote Buffer Overflow Vulnerability
References:
References:
- [remote] [control] ringtonetools 2.22 parse_emelody overflows song buffer ("D. J. Bernstein"
- Ringtone Tools Product Page (Michael Kohn)