MoreAmp '.maf' File Buffer Overflow Vulnerability
BID:40980
Info
MoreAmp '.maf' File Buffer Overflow Vulnerability
| Bugtraq ID: | 40980 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 19 2010 12:00AM |
| Updated: | Jul 19 2010 04:16PM |
| Credit: | Sid3^effects |
| Vulnerable: |
MoreAmp MoreAmp 0.1.25 |
| Not Vulnerable: |
MoreAmp MoreAmp 0.1.26 |
Discussion
MoreAmp '.maf' File Buffer Overflow Vulnerability
MoreAmp is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
MoreAmp is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
Exploit / POC
MoreAmp '.maf' File Buffer Overflow Vulnerability
The following proof-of-concept and exploit are available:
The following proof-of-concept and exploit are available:
Solution / Fix
MoreAmp '.maf' File Buffer Overflow Vulnerability
Solution:
Updates are available; please see the references for more information.
MoreAmp MoreAmp 0.1.25
Solution:
Updates are available; please see the references for more information.
MoreAmp MoreAmp 0.1.25
-
MoreAmp MoreAmp-0.1.26-binOSXintel.dmg
http://sourceforge.net/projects/moreamp/files/moreamp/MoreAmp-0.1.26/M oreAmp-0.1.26-binOSXintel.dmg/download -
MoreAmp MoreAmp-0.1.26-binOSXppc.dmg
http://sourceforge.net/projects/moreamp/files/moreamp/MoreAmp-0.1.26/M oreAmp-0.1.26-binOSXppc.dmg/download -
MoreAmp MoreAmp-0.1.26-binWin.zip
http://sourceforge.net/projects/moreamp/files/moreamp/MoreAmp-0.1.26/M oreAmp-0.1.26-binWin.zip/download