MagicISO CCD/Cue File Heap Overflow Vulnerability
BID:34574
Info
MagicISO CCD/Cue File Heap Overflow Vulnerability
| Bugtraq ID: | 34574 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-1257 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2009 12:00AM |
| Updated: | Apr 21 2009 10:36PM |
| Credit: | Stack |
| Vulnerable: |
Magic ISO MagicISO 5.5(build 274) Magic ISO MagicISO 5.5(build 273) |
| Not Vulnerable: | |
Discussion
MagicISO CCD/Cue File Heap Overflow Vulnerability
MagicISO is prone to a heap-overflow vulnerability that may be triggered by a malicious '.ccd' or '.cue' file.
A successful exploit will crash the application. An attacker may also be able to execute arbitrary code in the context of the application, but this has not been confirmed.
MagicISO is prone to a heap-overflow vulnerability that may be triggered by a malicious '.ccd' or '.cue' file.
A successful exploit will crash the application. An attacker may also be able to execute arbitrary code in the context of the application, but this has not been confirmed.
Exploit / POC
MagicISO CCD/Cue File Heap Overflow Vulnerability
The following proof of concept and exploit are available:
The following proof of concept and exploit are available:
Solution / Fix
MagicISO CCD/Cue File Heap Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If we feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If we feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].