MultiMedia Jukebox Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	44329
Class:	Boundary Condition Error
CVE:	CVE-2009-2650
Remote:	Yes
Local:	No
Published:	Jul 16 2009 12:00AM
Updated:	Jul 16 2009 12:00AM
Credit:	hack4love
Vulnerable:
Not Vulnerable:

MultiMedia Jukebox Remote Heap Buffer Overflow Vulnerability

MultiMedia Jukebox is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts likely result in denial-of-service conditions.

MultiMedia Jukebox 4.0 build 020124 is vulnerable; other versions may also be affected.

MultiMedia Jukebox Remote Heap Buffer Overflow Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/44329.pl

MultiMedia Jukebox Remote Heap Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MultiMedia Jukebox Remote Heap Buffer Overflow Vulnerability

References:

• MultiMedia Jukebox Homepage (Sorcerer Software)