Disk Sorter Enterprise 9.5.12 – Local Buffer Overflow

• Exploit Database
• 33 阅读

• 作者： Nassim Asrir
  日期： 2017-03-27
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/41737/

• [+] Title: Disk Sorter Server v9.5.12 - Local Stack-based buffer overflow
  [+] Credits / Discovery: Nassim Asrir
  [+] Author Email: wassline@gmail.com || https://www.linkedin.com/in/nassim-asrir-b73a57122/
  [+] Author Company: Henceforth
  [+] CVE: N/A
  
  Vendor:
  ===============
  
  http://www.disksorter.com/
  
   
  Download:
  ===========
  
  http://www.disksorter.com/setups/disksortersrv_setup_v9.5.12.exe
   
   
  Vulnerability Type:
  ===================
  
  local stack-based buffer overflow
  
  
  POC:
  ===================
  
  Launch the program click on :
  
  1 - Server 
  
  2 - Connect
  
  3 - and in the Share Name field inject (5000 "A") then the program crashed see the picture.
  
  CVE Reference:
  ===============
  
  N/A
   
   
  Tested on:
  =============== 
  
  Windows 7
  
  Win xp