Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4251. PoCs published by fl0 fl0w.
AI-analyzed exploit summary This exploit leverages a local buffer overflow in Jasc Paint Shop Pro v8 by crafting a malicious PNG file to overwrite the SEH handler, achieving arbitrary code execution. It uses a POP/POP/RET instruction from gear12d.dll for universal exploitation.
Description
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366.
Exploits (1)
This exploit leverages a local buffer overflow in Jasc Paint Shop Pro v8 by crafting a malicious PNG file to overwrite the SEH handler, achieving arbitrary code execution. It uses a POP/POP/RET instruction from gear12d.dll for universal exploitation.