CVE-2007-4911

JetCast Server 2.0.0.4308 - Denial of Service via Long .mp3 URI

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-4911. PoCs published by vCore.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in JetCast Server 2.0.0.4308 by sending a maliciously crafted HTTP GET request with an oversized buffer, leading to a denial-of-service (DoS) condition due to an access violation.

Description

JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a long .mp3 URI to TCP port 8000. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED

by vCore · pythondoswindows

https://www.exploit-db.com/exploits/4403

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in JetCast Server 2.0.0.4308 by sending a maliciously crafted HTTP GET request with an oversized buffer, leading to a denial-of-service (DoS) condition due to an access violation.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: JetCast Server 2.0.0.4308

No auth needed

Prerequisites: Network access to the target server · JetCast Server 2.0.0.4308 running on the target

MITRE ATT&CK