CVE-2010-1685
CursorArts ZipWrangler 1.20 - Stack-Based Buffer Overflow via Long Filename in ZIP File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1685. PoCs published by TecR0c & Sud0.
AI-analyzed exploit summary This exploit targets a SEH overflow vulnerability in ZipWrangler 1.20 by crafting a malicious .zip file with a payload that overwrites the SEH handler and executes arbitrary shellcode. The exploit leverages a specific address in rpcrt4.dll to bypass error handling and achieve remote code execution.
Description
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.
Exploits (1)
This exploit targets a SEH overflow vulnerability in ZipWrangler 1.20 by crafting a malicious .zip file with a payload that overwrites the SEH handler and executes arbitrary shellcode. The exploit leverages a specific address in rpcrt4.dll to bypass error handling and achieve remote code execution.