header-logo
Suggest Exploit
vendor:
aSc Timetables 2017
by:
Peter Baris
9,3
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: aSc Timetables 2017
Affected Version From: 1.0.0.1
Affected Version To: 1.0.0.1
Patch Exists: YES
Related CWE: N/A
CPE: aScTimeTables.exe
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows Server 2008 R2 x64, Windows 7 Pro x64, Windows Server 2012 R2 x64, Windows Server 2016 x64
2017

aSc Timetables 2017 input field buffer overflow and code execution

aSc Timetables 2017 is vulnerable to a buffer overflow vulnerability in the input field. An attacker can exploit this vulnerability by sending a specially crafted input to the application, which can lead to code execution. The exploit code and documentation can be found at http://saptech-erp.com.au/resources/Timetables.zip and http://saptech-erp.com.au/resources/TimeTables_2017.pdf respectively. The proof of concept can be found at https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41031.zip.

Mitigation:

The vendor has released a patch to address this vulnerability. Users should update to the latest version of aSc Timetables 2017.
Source

Exploit-DB raw data:

# Exploit Title: aSc Timetables 2017 input field buffer overflow and code execution
# Date: 2017-01-12
# Exploit Author: Peter Baris
# Exploit code: http://saptech-erp.com.au/resources/Timetables.zip
# Exploit documentation: http://saptech-erp.com.au/resources/TimeTables_2017.pdf
# Software Link: http://www.asctimetables.com/download/aScTimeTables.exe  
# Version: 1.0.0.1
# Tested on: Windows Server 2008 R2 x64, Windows 7 Pro x64, Windows Server 2012 R2 x64, Windows Server 2016 x64

POC:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41031.zip

Navigation

Suggest Exploit

Services By CQR