FL Studio FLP File Processing Heap Overflow Vulnerability
BID:14946
Info
FL Studio FLP File Processing Heap Overflow Vulnerability
| Bugtraq ID: | 14946 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 26 2005 12:00AM |
| Updated: | Sep 26 2005 12:00AM |
| Credit: | [email protected] is credited with the discovery of this issue. |
| Vulnerable: |
Image-Line Software FL Studio 5.0.1 |
| Not Vulnerable: | |
Discussion
FL Studio FLP File Processing Heap Overflow Vulnerability
FL Studio is susceptible to a remote heap overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer.
The application fails to bounds check user-supplied data contained in FLP files, resulting in the possibility of overflowing a destination heap buffer. This allows attackers to control the contents of critical memory control structures and write arbitrary data to arbitrary memory locations.
This issue likely allows attackers to execute arbitrary machine code in the context of the user running the affected application.
This issue is reported in version 5.0.1 of FL Studio. Other versions may also be affected.
FL Studio is susceptible to a remote heap overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer.
The application fails to bounds check user-supplied data contained in FLP files, resulting in the possibility of overflowing a destination heap buffer. This allows attackers to control the contents of critical memory control structures and write arbitrary data to arbitrary memory locations.
This issue likely allows attackers to execute arbitrary machine code in the context of the user running the affected application.
This issue is reported in version 5.0.1 of FL Studio. Other versions may also be affected.
Exploit / POC
FL Studio FLP File Processing Heap Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
FL Studio FLP File Processing Heap Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
FL Studio FLP File Processing Heap Overflow Vulnerability
References:
References:
- Image-Line Software Home Page (Image-Line Software)
- FL Studio 5 (.flp file processing) Heap Overflow ([email protected])