vendor:
xp-AntiSpy
by:
Dr_IDE
7.8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: xp-AntiSpy
Affected Version From: 3.9.7-4
Affected Version To: 3.9.7-4
Patch Exists: Yes
Related CWE: N/A
CPE: a:xp-antispy:xp-antispy:3.9.7-4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009
xp-AntiSpy <= 3.9.7-4 Local (.XPAS File) Local Buffer Overflow PoC
xp-AntiSpy is vulnerable to a local buffer overflow vulnerability. The program does not check the imported data in any way. If an attacker imports a malicious profile and selects it, the program will crash. This can lead to a register being controlled, allowing for potential code execution.
Mitigation:
Update to the latest version of xp-AntiSpy
