Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-10043.
PoCs published by Craig Freyman, Craig Freyman, Brandon Perry, juan vazquez, including Metasploit module exploits/windows/fileformat/actfax_import_users_bof.
AI-analyzed exploit summary This exploit targets a local privilege escalation vulnerability in ActFax 4.31 by leveraging a buffer overflow to execute arbitrary shellcode. The payload is encoded with Metasploit's x86/alpha_upper encoder and delivered via a maliciously crafted configuration file.
Description
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy() during CSV parsing. An attacker can exploit this vulnerability by crafting a malicious .exp file and importing it using the default character set "ECMA-94 / Latin 1 (ISO 8859)". Successful exploitation may result in arbitrary code execution, leading to full system compromise. User interaction is required to trigger the vulnerability.
Exploits (2)
This exploit targets a local privilege escalation vulnerability in ActFax 4.31 by leveraging a buffer overflow to execute arbitrary shellcode. The payload is encoded with Metasploit's x86/alpha_upper encoder and delivered via a maliciously crafted configuration file.
This Metasploit module exploits a stack-based buffer overflow in ActiveFax Server's 'Import Users from File' function via a maliciously crafted .exp file. It leverages an egghunter and encoder to achieve remote code execution, targeting ActFax 4.32 on Windows XP SP3 and Windows 7 SP1.
References (5)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H