what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

OSVDB: OSVDB-75371

Procyon Core Server HMI 1.13 Buffer Overflow

Posted Sep 13, 2011

Authored by Knud Erik Hojgaard, mr_me | Site metasploit.com

This Metasploit module exploits a vulnerability in the coreservice.exe component of Proycon Core Server versions 1.13 and below. While processing a password, the application fails to do proper bounds checking before copying data into a small buffer on the stack. This causes a buffer overflow and allows it to overwrite a structured exception handling record on the stack, allowing for unauthenticated remote code execution. Also, after the payload exits, Coreservice.exe should automatically recover.

tags | exploit, remote, overflow, code execution

advisories | CVE-2011-3322, OSVDB-75371

SHA-256 | 6b02358e406abc5384ec6cc6943c4b62bf2bebc540cf1b912151572b9b5615e2

Download | Favorite | View