Ots Labs OtsTurntables OFL File Buffer Overflow Vulnerability
BID:33257
Info
Ots Labs OtsTurntables OFL File Buffer Overflow Vulnerability
| Bugtraq ID: | 33257 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 14 2009 12:00AM |
| Updated: | Nov 29 2010 07:25AM |
| Credit: | suN8Hclf |
| Vulnerable: |
Ots Labs OtsTurntables 1.0.48 Ots Labs OtsTurntables 1.0.47 Ots Labs OtsTurntables 1.0.27 |
| Not Vulnerable: | |
Discussion
Ots Labs OtsTurntables OFL File Buffer Overflow Vulnerability
Ots Labs OtsTurntables is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input.
Attackers may be able to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
OtsTurntables 1.00.027, 1.00.047 and 1.00.048 are vulnerable; other versions may also be affected.
Ots Labs OtsTurntables is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input.
Attackers may be able to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
OtsTurntables 1.00.027, 1.00.047 and 1.00.048 are vulnerable; other versions may also be affected.
Exploit / POC
Ots Labs OtsTurntables OFL File Buffer Overflow Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to use the affected application to open a maliciously crafted file.
The following exploits are available:
To exploit this issue an attacker must entice an unsuspecting victim to use the affected application to open a maliciously crafted file.
The following exploits are available:
- /data/vulnerabilities/exploits/33257.pl
- /data/vulnerabilities/exploits/33257-AlpHaNiX.pl
- /data/vulnerabilities/exploits/33257-His0k4.py
- /data/vulnerabilities/exploits/33257-4.pl
- /data/vulnerabilities/exploits/33257-5.pl
- /data/vulnerabilities/exploits/33257-mr_me.py
- /data/vulnerabilities/exploits/33257_2.py
Solution / Fix
Ots Labs OtsTurntables OFL File Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Ots Labs OtsTurntables OFL File Buffer Overflow Vulnerability
References:
References: