← Advisories

Zortam MP3 Media Studio 9.40 Multiple Memory Corruption Vulnerabilities

Medium
Advisory ID
ZSL-2009-4920
Release Date
16 July 2009
Vendor
Zortam Corp. - http://www.zortam.com
Affected Version
9.40
CVE
N/A
Tested On
Microsoft Windows XP Professional SP3 (English)
Summary

Zortam Mp3 Media Studio is all-in-one Mp3 application that contains Mp3 ID3 Tag Organizer for searching and cataloguing Mp3 files into Mp3 library, editing ID3v1 and ID3v2.4 tags (ID3 Tag Editor-Mp3 Tag Editor), CD Ripper with album cover art/lyric support that uses CDDB (Internet Compact Disc Database) and automatically writes ID3v1 and ID3v2.4 tags.

Description

Zortam MP3 Studio version 9.40 suffers from a memory corruption attack from two different malicious files. The first method is thru a .mp3 file which has its ID3 tags filled with long strings. The second method is a .m3u list which is loaded in to the player resulting in memory corruption of the whole application including Dr.Watson crashing along with the app. For 1st method, you can click the Search Media for MP3's button and select the folder where the .mp3 file with the long ID3 tags is located. The 2nd method, load .m3u file into the MP3 Player.

Proof of Concept
Disclosure Timeline
N/A
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
16.07.2009Initial release
15.10.2010Added reference [7]