Channel that crashes clients.

I

invisiblemagic

Member
Sep 9, 2015
31
37
50
Hello earlier on I posted a post about the character
Code: 
⁢⁢⁢⁢
After this I looked at a bunch of posts and saw "WTF XD" I viewed the post to see a crash screen I tested this out and it also crashes me. After looking in the replies I saw @XURY post a reply about him exploiting the string and making a crash after testing out a few things I managed to replicate the same thing (I'm assuming) that xury did and produced a crash all I did was make a channel and name it the same string
Code: 
⁢⁢⁢⁢
but pasted it over and over again to make a massive string that no one could see after clicking on the channel it produced a crash. I am guessing this is a buffer overflow vulnerability (again I may be wrong). I have only tested this on 3.0.11.2 not 3.0.11.3 or 3.0.11.4 (server version) and I'm pretty sure someone could make a plugin out of this I myself can not code Teamspeak plugins but if someone else could it would be appreciated. I also found out that to not crash instantly after changing the name you have to right click press edit channel (after creating a channel) click on any other channel then edit the name instead of selecting the channel that crashes people it will be on the other channel you have selected therefore stopping you from instantly crashing. Anyways the main thing I am asking and I think would be fun to mess around with is for someone to code this as a plugin. It's like the avatar crasher but with channels! =P. Sorry for the long post =P.

EDIT: Tested on 3.0.11.4, seems to work.
 
Last edited:
Derp

Derp

Retired Staff
Contributor
Apr 30, 2015
933
1,014
217
+ This is disclosuring some VIP Stuff

@ehthe ,I suggest you move this to the VIP section
 
zacy5000

zacy5000

Member
Oct 10, 2015
12
2
38
After testing this seems to only crash the person who made the channel.
But maybe I didnt do enough testing.
 
ehthe

ehthe

Retired Staff
Contributor
Apr 26, 2015
1,029
896
216
moved to the vip section awaiting for admins input on the situation (is it vip or is it not)
 
ehthe

ehthe

Retired Staff
Contributor
Apr 26, 2015
1,029
896
216
or even the sqlite db directly :)

Here's what i got
6vQ4hVBmVDJcvbDL.png

And it doesn't crash
 
Derp

Derp

Retired Staff
Contributor
Apr 30, 2015
933
1,014
217
Tried to reproduce the crash in:

Windows XP
3.0.18 - 3.0.18.2

3.0.11.3 Windows Server

Also

@ehthe tested it on 3.0.11.4 Linux server

Unable to reproduce it
 
ehthe

ehthe

Retired Staff
Contributor
Apr 26, 2015
1,029
896
216
all 64 for me.
Having seen your video. It might have something to do with the theme handler of teamspeak.
 
I

invisiblemagic

Member
Sep 9, 2015
31
37
50
After some more testing I realised that his only works on 3.0.18.1 . Guess someone else exploited it before us and they fixed it.
 
Asphyxia

Asphyxia

Owner
Administrator
Apr 25, 2015
1,845
2
2,199
327
Copy and paste this into a new channel name, topic, description.
Code: 
色は匂へど 散りぬるを
我が世誰ぞ 常ならむ
有為の奥山 今日越えて
浅き夢見じ 酔ひもせず
If your client crashes you probably have the "test plugin" enabled, we found that out earlier today. ;)

I think the crash is related to the "test plugin" improperly handling certain characters. Notice in the YouTube video published to the right side you see a reference to the test plugin, which confirms to me this crash is directly caused by the test plugin being active.
 
0day

0day

Contributor
Oct 16, 2015
140
268
148
⁢⁢⁢⁢: a null color Chile throat to smell
My world who each a normal ram
Beyond promising of Okuyama today
Asaki dreamed same stingray also without

Anyone figure out why I posted this yet? lol
 
Last edited:
You must log in or register to reply here.
Top