CVE-2011-10012
HIGHNetOp Remote Control Client 9.5 - Stack-based Buffer Overflow via .dws Configuration File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-10012.
PoCs published by Metasploit, chap0, Ruben Alejandro, including Metasploit module exploits/windows/fileformat/netop.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in NetOp Remote Control Client 9.5 by crafting a malicious .dws file with a string longer than 520 characters, leading to arbitrary code execution.
Description
NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute arbitrary code when the file is opened.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in NetOp Remote Control Client 9.5 by crafting a malicious .dws file with a string longer than 520 characters, leading to arbitrary code execution.
This Perl script exploits a buffer overflow vulnerability in NetOp Remote Control versions 8.0, 9.1, 9.2, and 9.5 by crafting malicious .dws files. It includes shellcode for a reverse TCP shell and targets specific return addresses in nupdate.dll.
This Metasploit module exploits a stack-based buffer overflow in NetOp Remote Control 9.5 by crafting a malicious .dws file with a string longer than 520 characters, leading to arbitrary code execution.
References (7)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N