JPEGView 1.0.29 – Crash (PoC)

• Exploit Database
• 114 阅读

• 作者： Debasish Mandal
  日期： 2013-11-19
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/29707/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17

  Title: JPEGView - Image Viewer and Editor RCE POC Date: 18 November'13 Author: Debasish Mandal ( https://twitter.com/debasishm89 ) Version: JPEGView v1.0.29 Download Link : http://sourceforge.net/projects/jpegview/ Vendor Patch : Patched in version v1.0.30 Issue Ticket : http://sourceforge.net/p/jpegview/bugs/31/ Release Note : http://sourceforge.net/projects/jpegview/files/jpegview/1.0.30/ Tested on: Windows XP SP2   A read access violation near function pointer call can be triggered by feeding a specially crafted image(width or height smaller than 65535 ) which could lead to code exec.   The file that causes the AV is attached:   https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29707.gif