I Hear U Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	26516
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-6103
Remote:	Yes
Local:	No
Published:	Nov 19 2007 12:00AM
Updated:	Mar 13 2008 03:21AM
Credit:	Luigi Auriemma <[email protected]> is credited for the discovery of these issues.
Vulnerable:	I Hear U I Hear U 0.5.6
Not Vulnerable:	I Hear U I Hear U 0.5.7

I Hear U Multiple Remote Denial Of Service Vulnerabilities

Multiple denial-of-service vulnerabilities affect I Hear U because the application fails to handle specially crafted packets.

An attacker may leverage these issues to cause a remote denial-of-service condition in affected applications.

These issues affect versions prior to I Hear U 0.5.7.

I Hear U Multiple Remote Denial Of Service Vulnerabilities

Exploit code is available.

• /data/vulnerabilities/exploits/ihudos.zip

I Hear U Multiple Remote Denial Of Service Vulnerabilities

Solution:
The vendor has released I Hear U 0.5.7 to address these issues. Please see the references for more information.


I Hear U I Hear U 0.5.6

• I Hear U I Hear U 0.5.7
  https://sourceforge.net/project/showfiles.php?group_id=75788&package_i d=76288&release_id=355409

I Hear U Multiple Remote Denial Of Service Vulnerabilities

References:

• Home Page (I Hear U)
  
• I Hear U (Luigi Auriemma)
  
• Release Name: 0.5.7 (I Hear U)