Published: 28/07/2010 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 945

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in Fat Player 0.6b allows remote malicious users to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adammo fat player 0.6

Fat Player version 06b suffers from a wav file processing buffer overflow vulnerability ...

# Exploit Title: FatPlayer 06b Malicious WAV Buffer Overflow Vulnerability (SEH) # Date: 10/18/10 # Author: james [AT] learnsecurityonline [DOT] com # Software Link: sourceforgenet/projects/fatplayer/files/ # Version: 06 Beta # Tested on: Windows XP SP3 EN # CVE: N/A #! /usr/bin/env ruby junk = "\x41" * 4132 nSEH = "\x90\x90\xeb\x06" ...

#!/usr/bin/perl # by ahwak2000 # email: 0w[at]wcn #Tested on Windows XP SP3 (English) # Fat Player 06b(wav) Universal Local Buffer Exploit #sourceforgenet/projects/fatplayer/ ################################################################### my $shellcode= "\x89\xe1\xd9\xee\xd9\x71\xf4\x58\x50\x59\x49\x49\x49\x49" "\x43\x43\x43\x43\x43 ...

################################################################################################# # Stack-based buffer overflow in Fat Player 06b allows remote attackers to execute # arbitrary code via a long string in a wav file NOTE: some of these details are # obtained from third party information # # Reference: # webnvd ...

CWE-119 http://osvdb.org/57343 http://secunia.com/advisories/36441 http://www.vupen.com/english/advisories/2009/2394 https://exchange.xforce.ibmcloud.com/vulnerabilities/52713 http://www.exploit-db.com/exploits/9495 https://nvd.nist.gov https://packetstormsecurity.com/files/92636/Fat-Player-0.6b-WAV-File-Processing-Buffer-Overflow.html https://www.exploit-db.com/exploits/15279/

CVE-2009-4962

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect