Geometry Dash Arbitrary Code Execution Exploit

Опубликовано: 22 Май 2023
на канале: Blaze
26,190
496

UPDATE: The causing bug has been fixed both through the Mega Hack 7.1.1 client and on the official servers. Attempting to upload a level which uses the exploit entirely will get your IP and account banned from GD servers.

This proof of concept level demonstrates the possibility of local code execution on a computer upon playing a maliciously crafted level. This is due to a memory corruption bug resulting from lack of proper validation when parsing certain objects. This vulnerability exists not only when playing in the level editor - but also when playing levels normally.

The video specifically demonstrates how the level was able to modify the contents of the CPU instruction pointer (EIP) as well as the ECX register. This can be further modified to allow for execution of arbitrary code which can be used implant malware.

No known level has been known to use this exploit.


На этой странице сайта вы можете посмотреть видео онлайн Geometry Dash Arbitrary Code Execution Exploit длительностью часов минут секунд в хорошем качестве, которое загрузил пользователь Blaze 22 Май 2023, поделитесь ссылкой с друзьями и знакомыми, на youtube это видео уже посмотрели 26,190 раз и оно понравилось 496 зрителям. Приятного просмотра!