CVE-2008-0747
jetAudio Basic < 7.0.5 - Stack-based Buffer Overflow via Long URL in ASX File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-0747. PoCs published by D3V!L FUCKER, laurent gaffié.
AI-analyzed exploit summary This exploit generates a malformed ASX file with an excessively long URL to trigger a local crash in jetAudio v8.0.0.0 Basic. The PoC demonstrates a denial-of-service (DoS) condition by overwriting a buffer.
Description
Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487.
Exploits (2)
This exploit generates a malformed ASX file with an excessively long URL to trigger a local crash in jetAudio v8.0.0.0 Basic. The PoC demonstrates a denial-of-service (DoS) condition by overwriting a buffer.
This exploit demonstrates a remote stack overflow in jetAudio <= 7.0.5 when parsing an ASX file with an overly long URL (1096 'A' characters). The PoC crashes the program by overwriting the ESI register, leading to an access violation.