Teamspeak Memory Corruption Vulnerability

Bugtraq ID:	44502
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 28 2010 12:00AM
Updated:	Oct 28 2010 12:00AM
Credit:	Jokaim and nSense
Vulnerable:	Teamspeak Teamspeak 2.0.32.60
Not Vulnerable:	Teamspeak Teamspeak 3.0

Teamspeak Memory Corruption Vulnerability

Teamspeak is prone to a memory-corruption vulnerability.

Attackers can exploit this issue by sending a specially crafted voice transmission packet containing malicious data.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Teamspeak version 2.0.32.60 is vulnerable.

Teamspeak Memory Corruption Vulnerability

The following proof-of-concept packet is available:
f2be000426ad7e00300000000001000a414141414141414141424141414141
4141414141414141414141414141414141414100ff99414141424242424141
414141414141414141

Teamspeak Memory Corruption Vulnerability

Solution:
Reportedly, updates are available. Please contact the vendor for details.

Teamspeak Memory Corruption Vulnerability

References:

• nSense Vulnerability Research Security Advisory NSENSE-2010-002 (nSense)
  
• Vendor Homepage (Teamspeak Systems)