Description
gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code. Exploitation requires local interaction, typically by convincing a user to open the malicious file.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
gAlan gAlan
Default version status: unaffected
0 to ≤ 0.2.1affected
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/galan_fileformat_bof.rb ↗
- https://www.exploit-db.com/exploits/16664 ↗
- https://www.exploit-db.com/exploits/10345 ↗
- https://www.exploit-db.com/exploits/10339 ↗
- https://www.fortiguard.com/encyclopedia/ips/18034/galan-galan-file-stack-overflow ↗
- https://web.archive.org/web/20101210055252/http://galan.sourceforge.net/ ↗
- https://www.vulncheck.com/advisories/galan-buffer-overflow ↗