Steinberg MyMp3PRO '.m3u' File Handling Multiple Buffer Overflow Vulnerabilitie

Bugtraq ID:	64487
Class:	Boundary Condition Error
CVE:	CVE-2013-7186
Remote:	Yes
Local:	No
Published:	Dec 20 2013 12:00AM
Updated:	Dec 20 2013 12:00AM
Credit:	metacom
Vulnerable:	CJ John PM Steinberg MyMp3PRO 5.0 Build 5.1.0.21
Not Vulnerable:

Steinberg MyMp3PRO '.m3u' File Handling Multiple Buffer Overflow Vulnerabilitie

Steinberg MyMp3PRO is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

Steinberg MyMp3PRO 5.0 Build 5.1.0.21 is vulnerable; other versions may also be affected.

Steinberg MyMp3PRO '.m3u' File Handling Multiple Buffer Overflow Vulnerabilitie

The following proof-of-concept codes are available:

• /data/vulnerabilities/exploits/64487.txt

Steinberg MyMp3PRO '.m3u' File Handling Multiple Buffer Overflow Vulnerabilitie

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Steinberg MyMp3PRO '.m3u' File Handling Multiple Buffer Overflow Vulnerabilitie

References:

• Steinberg MyMp3PRO Homepage (CJ John PM)