1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Attack: xRadio XRF File BO

Attack: xRadio XRF File BO

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

This signature detects an attempt to exploit a buffer overflow vulnerability in xRadio.

Additional Information

xRadio is an application for listening to Internet radio through Windows Media Player.

The application is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. Specifically, this issue occurs when the application processes a specially crafted '.xrl' file.

An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Affected

  • xRadio 0.95b, 0.9, and 0.5

Additional References

  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube