CVEs-PoC/2011/CVE-2011-10012.md

CVE-2011-10012

Description

NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute arbitrary code when the file is opened.

POC

Reference

• https://www.exploit-db.com/exploits/17223
• https://www.exploit-db.com/exploits/18697
• https://www.vulncheck.com/advisories/netop-remote-control-client-dws-file-buffer-overflow

Github

No PoCs found on GitHub currently.