
The vulnerability can be exploited by local attackers with privileged system user account and medium required user interaction. Rename Folder by TAG - TAG Listing (Component) Rename Folder by TAG - Genres and Templates Successful exploitation of the buffer overflow vulnerability results in overruns of the buffer(s) boundary and overwrites adjacent memory. The vulnerability can be exploited by privileged system user accounts with low or medium required user interaction. The vulnerable add input parameters to exploit the local vulnerability are `Custom Genres` & `Templates for Foldernames`. User account the syncronized software context and clicks on the rename function for the tag listing the overflow occurs. When the victim is processing to click with another system When processing to (buffer) list the inserted context (large). Local attackers can use the `Edit template` function of the rename module to overflow the memory The vulnerability is located in the `rename` module of the software when processing to load the `rename folder by tag`įunction as listing. In memory addresses adjacent to the allocated buffer. The buffer overflow occurs when data written to a buffer, due to insufficient bounds checking, corrupts data values The Vulnerability Laboratory Research Team discovered a local stack buffer overflow vulnerability in the Yandex xdLab TagScanner v5.1 software.Ī local stack buffer overflow vulnerability is detected in the official Yandex xdLab TagScanner v5.1 software. Playlist maker with ability to export playlists to HTML or Excel. Powerful TAG editor with batch functions and special features. Export information to HTML, XML CSV or any user-defined format Resize cover art for portable devices on the fly Supports for embedded lyrics and cover art Supports ID3 1.0/1.1/2.2/2.3/2.4 tags, APE v1 and v2 tags, Vorbis Comments, WMA tags and MP4(iTunes) metadata Supports MP3, OGG, FLAC, WMA, MPEG-4, Opus, Musepack, Monkey`s Audio, AAC, OptimFROG, SPEEX, WavPack, TrueAudio files

Words replacement and case conversion from tags and filenames Tag fields formatting and rearrangement Generate tag information from file/foldernames Import tag information and album art from online databases like freedb or Amazon Rename files based on the tag and file information Vorbis comments, APEv2, WindowsMedia and MP4(iTunes) tags. Also you may get album info via online databases like freedb or Amazon.

It can edit tags of mostly state-of-the-artĪudio formats, rename files based on the tag information, generate tag information from filenames, and perform any transformations of TagScanner is a multifunction program for organizing and managing your music collection.

TagScanner v5.1 - Stack Buffer Overflow Vulnerability
