Native Instruments Multiple Products Multiple Memory Corruption Vulnerabilities
BID:44991
Info
Native Instruments Multiple Products Multiple Memory Corruption Vulnerabilities
| Bugtraq ID: | 44991 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 20 2010 12:00AM |
| Updated: | Nov 20 2010 12:00AM |
| Credit: | LiquidWorm |
| Vulnerable: |
Native Instruments TRAKTOR PRO 1.2.6 8491 Native Instruments REAKTOR 5 PLAYER 5.5.1 10584 Native Instruments MASSIVE 1.1.4 Native Instruments KONTAKT 4 PLAYER 4.1.3 4125 |
| Not Vulnerable: | |
Discussion
Native Instruments Multiple Products Multiple Memory Corruption Vulnerabilities
Multiple products from Native Instruments are prone to multiple memory-corruption vulnerabilities because the applications fail to perform adequate boundary checks on user-supplied input.
Attackers may leverage these issues to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions.
The issues affect the following products:
REAKTOR 5 PLAYER 5.5.1.10584
KONTAKT 4 PLAYER 4.1.3.4125
TRAKTOR PRO 1.2.6.8491
MASSIVE 1.1.4
Multiple products from Native Instruments are prone to multiple memory-corruption vulnerabilities because the applications fail to perform adequate boundary checks on user-supplied input.
Attackers may leverage these issues to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions.
The issues affect the following products:
REAKTOR 5 PLAYER 5.5.1.10584
KONTAKT 4 PLAYER 4.1.3.4125
TRAKTOR PRO 1.2.6.8491
MASSIVE 1.1.4
Exploit / POC
Native Instruments Multiple Products Multiple Memory Corruption Vulnerabilities
The following proofs of concept are available:
The following proofs of concept are available:
Solution / Fix
Native Instruments Multiple Products Multiple Memory Corruption Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
References
Native Instruments Multiple Products Multiple Memory Corruption Vulnerabilities
References:
References:
- Native Instruments Homepage (Native Instruments)
- Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow (Zero Science Lab)
- Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability (Zero Science Lab)
- Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability (Zero Science Lab)
- Native Instruments Traktor Pro 1.2.6 Stack-based Buffer Overflow Vulnerability (Zero Science Lab)