MJM Core Multimedia Suite and Quickplayer '.s3m' File Remote Buffer Overflow Vulnerability

Bugtraq ID:	47665
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 02 2011 12:00AM
Updated:	May 02 2011 12:00AM
Credit:	CORELAN
Vulnerable:	mjm QuickPlayer 2.3 mjm Core Multimedia Suite 2.4
Not Vulnerable:

MJM Core Multimedia Suite and Quickplayer '.s3m' File Remote Buffer Overflow Vulnerability

MJM Core Multimedia Suite and Quickplayer are prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition.

MJM Core Multimedia Suite (Core Player) 2.4 and Quickplayer 2.3 (2010) are vulnerable.

MJM Core Multimedia Suite and Quickplayer '.s3m' File Remote Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/47665_1.rb
• /data/vulnerabilities/exploits/47665_2.rb

MJM Core Multimedia Suite and Quickplayer '.s3m' File Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MJM Core Multimedia Suite and Quickplayer '.s3m' File Remote Buffer Overflow Vulnerability

References:

• Vendor Homepage (MJM)