CVE-2012-10051
HIGHPhotodex ProShow Producer <5.0.3256 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-10051.
PoCs published by Metasploit, Julien Ahrens, Julien Ahrens, mr.pr0n, juan vazquez, including Metasploit module exploits/windows/fileformat/proshow_load_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Photodex ProShow Producer 5.0.3256 via a malformed 'load' file, achieving remote code execution when the victim opens the application. The exploit uses SEH overwrites and a custom jump-back payload to trigger the vulnerability.
Description
Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugin load list files. When a specially crafted load file is placed in the installation directory, the application fails to properly validate its contents, leading to a buffer overflow when the file is parsed during startup. Exploitation requires local access to place the file and user interaction to launch the application.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Photodex ProShow Producer 5.0.3256 via a malformed 'load' file, achieving remote code execution when the victim opens the application. The exploit uses SEH overwrites and a custom jump-back payload to trigger the vulnerability.
This exploit demonstrates a stack-based buffer overflow in Photodex ProShow Producer by creating a malicious 'load' file. The PoC writes a payload of 9848 'A's, followed by 4 'B's (EIP overwrite), and 100 'C's to trigger the overflow.
This Metasploit module exploits a stack-based buffer overflow in Photodex ProShow Producer 5.0.3256 via a maliciously crafted 'load' file. It leverages SEH overwrites and a jump-back payload to achieve remote code execution when the victim opens the application.
References (8)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N