CVE-2003-1339
ezmeeting - Stack-based Buffer Overflow via Long GET Request or SwEzModule.dll Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-1339. PoCs published by kralor, Peter Winter-Smith.
AI-analyzed exploit summary This exploit targets a buffer overflow in eZ v3.3 to v3.5 by leveraging a static JMP ESP in Cryptso.dll. It delivers a reverse shell payload using a universal shellcode with PEB technique.
Description
Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll.
Exploits (2)
This exploit targets a buffer overflow in eZ v3.3 to v3.5 by leveraging a static JMP ESP in Cryptso.dll. It delivers a reverse shell payload using a universal shellcode with PEB technique.
This exploit targets a stack overflow in eZnet.exe to download and execute a trojan from a specified URL. It uses a custom shellcode that leverages LoadLibraryA and GetProcAddress to dynamically resolve API functions for URLDownloadToFileA and WinExec.