# Easy PhotoResQ 1.0 - 拒绝服务漏洞 (PoC) ## 漏洞概述 - **EDB-ID**: 45300 - **作者**: Gionathan Reale - **类型**: 拒绝服务 (DoS) - **平台**: Windows 8 - **日期**: 2018-08-29 - **漏洞应用**: Easy PhotoResQ 1.0 ## 影响范围 - **操作系统**: Windows 7 32-bit - **软件版本**: v1.8 ## 修复方案 - 暂无明确修复方案，建议用户更新软件或采取其他安全措施。 ## POC代码 ```python # Exploit Title: Easy PhotoResQ 1.0 - Denial Of Service (PoC) # Author: Gionathan "John" Reale # Discovery Date: 2018-08-29 # Homepage: https://www.htdune.com/ # Software Link: https://www.htdune.com/download.html # Tested Version: v1.8 # Tested on OS: Windows 7 32-bit # Steps to Reproduce: Run the python exploit script, it will create a new # file with the name 'exploit.txt'. Copy the content of the new file 'exploit.txt'. # Now start the program. Now when you are inside of the program click "File" > "Options". In the field: "Folder / filename" paste # the copied content from "exploit.txt". # Now click "OK" and see a crash! #!/usr/bin/bin/python ```