CVEs-PoC/2016/CVE-2016-4289.md

CVE-2016-4289

Description

A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2.1.19357 application. A specially created long path can lead to a buffer overflow on the stack resulting in code execution. An attacker needs to create path longer than 99 characters to trigger this vulnerability.

POC

Reference

• http://www.talosintelligence.com/reports/TALOS-2016-0127/
• http://www.talosintelligence.com/reports/TALOS-2016-0127/

Github

No PoCs found on GitHub currently.