MediaCoder Remote Buffer Overflow Vulnerability
BID:38405
Info
MediaCoder Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 38405 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 24 2010 12:00AM |
| Updated: | Nov 29 2010 03:55PM |
| Credit: | fl0 fl0w |
| Vulnerable: |
MediaCoder MediaCoder 0.6.2 4275 MediaCoder MediaCoder 0.7.5.4792 MediaCoder MediaCoder 0.7.5.4710 MediaCoder MediaCoder 0.7.3.4682 MediaCoder MediaCoder 0.7.3.4605 MediaCoder MediaCoder 0.7.1.4490 MediaCoder MediaCoder 0.7.1.4488 MediaCoder MediaCoder 0.7.1.4486 |
| Not Vulnerable: | |
Discussion
MediaCoder Remote Buffer Overflow Vulnerability
MediaCoder is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
MediaCoder 0.7.3.4605 is vulnerable; other versions may also be affected.
MediaCoder is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
MediaCoder 0.7.3.4605 is vulnerable; other versions may also be affected.
Exploit / POC
MediaCoder Remote Buffer Overflow Vulnerability
The following exploits are available:
The following exploits are available:
- /data/vulnerabilities/exploits/38405-2.c
- /data/vulnerabilities/exploits/38405.pl
- /data/vulnerabilities/exploits/38405.py
- /data/vulnerabilities/exploits/38405.c
- /data/vulnerabilities/exploits/38405-2.pl
- /data/vulnerabilities/exploits/38405-3.pl
- /data/vulnerabilities/exploits/38405-2.py
- /data/vulnerabilities/exploits/38405-3.py
- /data/vulnerabilities/exploits/38405-4.pl
- /data/vulnerabilities/exploits/38405-5.py
Solution / Fix
MediaCoder Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].