Multiple Mini-stream Software Products '.ram' File Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	34860
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 07 2009 12:00AM
Updated:	May 08 2009 01:06AM
Credit:	G4N0K
Vulnerable:	Mini-stream Software RMDownloader 3.0.0.9 Mini-stream Software Mini-streamRipper 3.0.1 .1 Mini-stream Software Mini-stream RM-MP3 Converter 3.0 .7 Mini-stream Software ASX to MP3 Converter 3.0 .7
Not Vulnerable:

Multiple Mini-stream Software Products '.ram' File Remote Stack Buffer Overflow Vulnerability

Multiple Mini-stream Software products are prone to a remote stack-based buffer-overflow vulnerability because the applications fail to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of an affected application. Failed attacks will cause denial-of-service conditions.

This issue affects the following products:

RM-MP3 Converter 3.0.0.7
Ripper 3.0.1.1
ASX to MP3 Converter 3.0.0.7
RM Downloader 3.0.0.9

Multiple Mini-stream Software Products '.ram' File Remote Stack Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/34860.pl

Multiple Mini-stream Software Products '.ram' File Remote Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Mini-stream Software Products '.ram' File Remote Stack Buffer Overflow Vulnerability

References:

• Vendor Homepage (Mini-stream Software)