Maya Studio eo-video Playlist File Buffer Overflow Vulnerability

Bugtraq ID:	30717
Class:	Boundary Condition Error
CVE:	CVE-2008-3733
Remote:	Yes
Local:	No
Published:	Aug 16 2008 12:00AM
Updated:	May 07 2015 05:24PM
Credit:	Muris Kurgas aka j0rgan
Vulnerable:	Maya Studio eo-video 1.36
Not Vulnerable:

Maya Studio eo-video Playlist File Buffer Overflow Vulnerability

Maya Studio eo-video is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when handling playlist files.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

This issue affects eo-video 1.36; other versions may also be affected.

Maya Studio eo-video Playlist File Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

A proof of concept and exploit are available:

• /data/vulnerabilities/exploits/30717.py
• /data/vulnerabilities/exploits/30717-2.py

Maya Studio eo-video Playlist File Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Maya Studio eo-video Playlist File Buffer Overflow Vulnerability

References:

• eo-video Home Page (Maya Studio)