J River Media Center Mediacenter.EXE Buffer Overflow Vulnerability

Bugtraq ID:	19853
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2006 12:00AM
Updated:	Sep 07 2006 12:03AM
Credit:	nOOb is credited with the discovery of this vulnerability.
Vulnerable:	J River Media Center 11.0.039
Not Vulnerable:

J River Media Center Mediacenter.EXE Buffer Overflow Vulnerability

Media Center and various Media Center plugins are prone to a buffer-overflow vulnerability.

This issue occurs because the application fails to bounds-check data before copying it into a finite-sized buffer.

This issue allows remote attackers to cause the application to crash, denying service to the legitimate user. Arbitrary code execution may be possible, but this has not been confirmed.

Version 11.0.309 is vulnerable to this issue; other versions may also be affected.

J River Media Center Mediacenter.EXE Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/19853.pl

J River Media Center Mediacenter.EXE Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

J River Media Center Mediacenter.EXE Buffer Overflow Vulnerability

References:

• J. River Media Center Home Page (J. River)