vendor:
Easy File Management Web Server
by:
Julien Ahrens
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Easy File Management Web Server
Affected Version From: 5.3
Affected Version To: 5.3
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows XP (German), Windows 7 x64 (German), Windows 8 (English), Windows 8 x64 (German)
2014
Easy File Management Web Server v5.3 – USERID Remote Buffer Overflow (ROP)
This exploit leverages a buffer overflow vulnerability in the Easy File Management Web Server v5.3. By sending a specially crafted UserID string, an attacker can overflow the buffer and execute arbitrary code.
Mitigation:
Apply the latest patch or update to a version that is not affected by this vulnerability. Additionally, use a firewall to restrict access to the affected server.