vendor:
BigAnt Server
by:
Lorenzo Cantoni
7.5
CVSS
HIGH
Stack Overflow
CWE
Product Name: BigAnt Server
Affected Version From: BigAnt Console 2.52 SP5
Affected Version To: BigAnt Console 2.52 SP5
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows 7 SP0 x86 Italian
2012
BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit (ASLR + DEP bypass)
This exploit takes advantage of a stack overflow vulnerability in BigAnt Server version 2.52 SP5. It bypasses Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP) protections. The attack plan involves overwriting the Structured Exception Handling (SEH) handler with a Return-Oriented Programming (ROP) gadget. The ROP Chain is then executed to perform a VirtualAlloc() and PUSHAD. Finally, the shellcode is run.
Mitigation:
Apply the latest patch from the vendor.