CrossFont 7.5 - 拒绝服务漏洞 (PoC) 漏洞概述 漏洞标题: CrossFont 7.5 - Denial of Service (PoC) EDB-ID: 45494 作者: Gionathan Reale 发布日期: 2018-09-26 漏洞类型: 拒绝服务 (DoS) 受影响软件: CrossFont 7.5 软件链接: http://www.acutesystems.com/cfnt/cfsetup.exe 影响范围 测试平台: Windows 7 32-bit 触发条件: 在程序运行后，点击 "Enter Key"，将 exploit.txt 的内容粘贴到 "License Key/Code" 字段并点击 "OK"，导致程序崩溃。 修复方案 页面未提供具体的修复方案或补丁信息。 POC 代码 ```python #!/usr/bin/python Exploit Title: CrossFont 7.5 - Denial of Service (PoC) Author: Gionathan "John" Reale Discovery Date: 2018-09-26 Software Link: http://www.acutesystems.com/cfnt/cfsetup.exe Tested Version: 7.5 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, it will create a new file with the name "exploit.txt". Copy the content from "exploit.txt". Now start the program. When inside the program click "Enter Key". Now paste the contents of "exploit.txt" into the fields:"License Key/Code" Click "OK" and you will see a crash.