CVE-2011-10015

This is a Metasploit module exploiting a stack-based buffer overflow in Cytel Studio 9.0 via a malformed CY3 file. It leverages SEH overwrite to achieve remote code execution.

This is a vulnerability writeup detailing three stack overflow vulnerabilities in Cytel Studio products (StatXact, LogXact, CrossOver) versions <= 9.0.0. The vulnerabilities include a strings stack overflow, a rows integer overflow, and a CYB USE stack overflow, all exploitable via file input.

This Metasploit module exploits a stack-based buffer overflow in Cytel Studio 9.0 via a malformed CY3 file, triggering an SEH overwrite to achieve remote code execution.