Fathom 2.4 - 拒绝服务 (PoC) 漏洞概述 漏洞标题: Fathom 2.4 - Denial Of Service (PoC) EDB-ID: 45294 作者: Gionathan Reale 发布日期: 2018-08-29 漏洞类型: 拒绝服务 (DoS) 受影响平台: Windows x86 受影响版本: v2.4 测试环境: Windows 7 32-bit 影响范围 受影响软件: Fathom (https://fathom.concord.org/) 影响描述: 利用该漏洞可导致应用程序崩溃。 修复方案 页面未提供具体的修复方案，仅提供了复现步骤。 POC代码/利用代码 ```python Exploit Title: Fathom 2.4 - Denial Of Service (PoC) Author: Gionathan "John" Reale Discovery Date: 2018-08-28 Homepage: https://fathom.concord.org/ Software Link: https://fathom.concord.org/download/ Tested Version: v2.4 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, it will create a new file with the name "exploit.txt". Copy the content of the new file "exploit.txt". New start the program, in the field named: "Authorization Code" paste the "exploit.txt" content copied earlier. Click "Activate" and see a crash! #!/usr/bin/python