InfraRecorder 0.53 - '.txt' 拒绝服务漏洞 (PoC) 漏洞概述 漏洞标题: InfraRecorder 0.53 - '.txt' Denial of Service (PoC) EDB-ID: 45413 作者: Gionathan Reale 发布日期: 2018-09-14 漏洞类型: 拒绝服务 (DoS) 利用方式: 通过构造恶意文件触发程序崩溃。 影响范围 受影响软件: InfraRecorder 受影响版本: 0.53 测试平台: Windows 7 32bit 修复方案 页面未提供具体的补丁或修复方案，仅提供了利用代码 (PoC)。 利用代码 (PoC) ```python #!/usr/bin/python Exploit Title: InfraRecorder 0.53 - '.txt' Denial of Service (PoC) Date: 2018-09-14 Exploit Author: Gionathan "John" Reale Version: version 0.53 Download: http://sourceforge.net/projects/infrarecorder/files/Infrarecorder/0.53/ir053.exe/download Tested on: Windows 7 32bit Steps to Reproduce: Run the python exploit script, it will create a new file with the name "exploit.txt". Start the program and click "Edit" > "Import..." Find the file "exploit.txt" and click "Open" You will see a crash!