Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit

セキュリティ

MS07-064のDirectX のSAMIファイルの処理にバッファオーバーフロー脆弱性に関するExploitが出ています。

##########################################################################
# Bug discovered by Jun Mao of VeriSign iDefense 
# http://www.securityfocus.com/bid/26789
# CVE-2007-3901
# Coded by Matteo Memelli aka ryujin
# http://www.gray-world.net http://www.be4mind.com
# Tested on: Windows 2000 SP4 English, DirectX 7.0 (4.07.00.0700) 
#------------------------------------------------------------------------
# THX TO all the guys at www.offensive-security.com
# EXPECIALLY TO ONE: THX FOR "NOT" HELPING MUTS!!! 
# I DONT FEEL FC4'd ANYMORE NOW :P muhahahaha
#------------------------------------------------------------------------
##########################################################################  
# On Windows Media Player Open---> http://attacker/anyfile.smi
# .smi extension is necessary, filename can be anything.

screenshot