CVE-2009-1063

eXeScope 6.50 - Buffer Overflow via Crafted Executable File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-1063. PoCs published by Koshi.

AI-analyzed exploit summary This exploit targets a local buffer overflow in eXeScope 6.50 by crafting a malicious PE file that triggers a buffer overflow, overwriting the EIP and executing shellcode to spawn calc.exe. The exploit uses a ShikataGaNai-encoded payload.

Description

Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Koshi · perllocalwindows

https://www.exploit-db.com/exploits/8270

View Code ZIP pw:eip

This exploit targets a local buffer overflow in eXeScope 6.50 by crafting a malicious PE file that triggers a buffer overflow, overwriting the EIP and executing shellcode to spawn calc.exe. The exploit uses a ShikataGaNai-encoded payload.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: eXeScope 6.50

No auth needed

Prerequisites: Victim must open the malicious PE file

MITRE ATT&CK