Don't Play With The AudioPLUS Playlist Vulnerability

Let me introduce you to a vulnerability that should not be played with in any way, shape or form. It is causing chaos for many people and could get to you to, if you are not careful. This is no matter to be taken lightly and everyone who makes use of this product needs to be aware of the potential dangers involved. This vulnerability relates to AudioPLUS and was provided and brought to our attention by none other than hack4love.

For those of you who may not know what AudioPLUS is, I am here to help you out in this regard. AudioPLUS is a fantastic and extremely user friendly MP3 player. Its supports a variety of audio formats with the inclusion of MP3, .MP2, .WAV, .L3, .L2 as well as.ATX. It has its very own unique equalizer, which helps its users get the perfect frequency of sound required for their individual needs. The AudioPLUS MP3 player is geared for a variety of operating systems, with the inclusion of Windows XP. Some of the files of Windows XP may include but are not limited to the following:_inst16.exe, a3d.dll, b1cbase.sys, c_g18030.dll as well as cabinet.pdb.dll.

The big question that you may all be pondering over, is what has caused this vulnerability in AudioPLUS? This vulnerability occurs due to a boundary error that takes place during the processing of the playlist files. If this vulnerability is exploited with accuracy and precision, then the risks are high that it may lead to a stack based buffer overflow. This may occur via a ".m3u" or ".lst" file, which has an overly long entry.

The risk of arbitrary code being executed is also extremely high. If arbitrary code is executed, then the malicious attacker will be able to completely take over a targeted machine, resulting in unauthorized access to confidential information.

This vulnerability has been rated as highly critical. It has been fully confirmed in version 2.0.0.215. I would like to bring to the attention of all users, that it is highly possible that other versions may also be affected. The solution to this vulnerability is for users not to open any untrusted playlists under any circumstances. I wish you all a safe and secure AudioPLUS experience.