mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 06:51:35 +02:00
0xMarcio
1.0 KiB
1.0 KiB
CVE-2013-3928
Description
Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.
POC
Reference
- http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html
- http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html
- http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html
- http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html
- http://www.exploit-db.com/exploits/27609
- http://www.exploit-db.com/exploits/27609
Github
No PoCs found on GitHub currently.