Rating:

Original writeup (http://blog.lse.epita.fr/articles/57-ebctf-2013-pwn300.html).