critical9.3Public exploit code
CVE-2013-7186
Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long string in a .m3u file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Steinberg MyMp3PRO 5.0 - Local Buffer Overflow (SEH) (DEP Bypass + ROP)2013-12-04 · local · windows · Verified
Impact
Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long string in a .m3u file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steinberg | Mymp3pro | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/124282
- http://packetstormsecurity.com/files/124283
- http://packetstormsecurity.com/files/124284
- http://www.exploit-db.com/exploits/30032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89454
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89468
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89469
- http://packetstormsecurity.com/files/124282
- http://packetstormsecurity.com/files/124283
- http://packetstormsecurity.com/files/124284
- http://www.exploit-db.com/exploits/30032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89454
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89468
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89469