CVE-2005-0308
W32Dasm 8.93 and earlier - Buffer Overflow via Large Import or Export Function Name
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0308.
PoCs published by Metasploit, aushack, including Metasploit module exploits/windows/fileformat/ursoft_w32dasm.
AI-analyzed exploit summary This exploit targets a buffer overflow in URSoft W32Dasm Disassembler <= v8.93 by crafting a malicious file that triggers arbitrary code execution when disassembled. It uses a stack-based overflow to redirect execution to shellcode via a JMP ESP instruction in kernel32.dll.
Description
Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name.
Exploits (2)
This exploit targets a buffer overflow in URSoft W32Dasm Disassembler <= v8.93 by crafting a malicious file that triggers arbitrary code execution when disassembled. It uses a stack-based overflow to redirect execution to shellcode via a JMP ESP instruction in kernel32.dll.
This Metasploit module exploits a buffer overflow in URSoft W32Dasm <= v8.93 by crafting a malicious file that triggers arbitrary code execution when disassembled. The exploit leverages a stack-based overflow in the Imports/Exports function to achieve local code execution.