vendor:
URL Hunter
by:
Ayrbyte
7.5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: URL Hunter
Affected Version From: 3.1.2.1
Affected Version To: 3.1.2.1
Patch Exists: NO
Related CWE: Not mentioned
CPE: a:mini-stream_software:url_hunter:3.1.2.1
Platforms Tested: Windows XP sp 2
Not mentioned
URL Hunter buffer overflow DEP Bypass
This exploit takes advantage of a buffer overflow vulnerability in Mini-stream Software's URL Hunter software. It bypasses the DEP (Data Execution Prevention) protection mechanism. The exploit code allows an attacker to execute arbitrary code by overwriting the return address with a shellcode. The shellcode calls the MessageBoxA function to display the message 'PWNED by Ayrbyte...! ^_^'.
Mitigation:
Apply the latest patch provided by the vendor. Avoid opening untrusted URLs with the affected software.
