cve-2004-2167

테스트할 코드:

CentOS 6.4 운영 체제를 다운로드하십시오

아래 링크에서 Latex2RTf를 Downloads 폴더로 다운로드하십시오:

https://sourceforge.net/projects/latex2rtf/files/latex2rtf-win/1.9.15/

cd /home/username/Downloads/

tar -xvf latex2rtf-1.9.15.tar.gz

cd latex2rtf-1.9.15

sudo make

sudo make install

gcc -o exploit exploit.c

./exploit > shell_code.tex

./latex2rtf shell_code.tex

패치 단계: 다음 링크에서 패치를 다운로드하십시오:

https://github.com/uzzzval/cve-2004-2167/blob/master/definitions_patch.c

cp definitions_patch.c /home/username/Downloads/latex2rtf-1.9.15/ mv definitions_patch.c definitions.c sudo Make sudo make install ./latex2rtf shell_code.tex