CVE-2012-2915
Lattice Semiconductor PAC-Designer <6.2.1344 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-2915.
PoCs published by Metasploit, b33f, Unknown, juan vazquez, sinn3r, including Metasploit module exploits/windows/fileformat/lattice_pac_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.21 by crafting a malicious .pac file with an overly long 'value' field in the 'SymbolicSchematicData' tag, leading to arbitrary code execution.
Description
Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) file.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.21 by crafting a malicious .pac file with an overly long 'value' field in the 'SymbolicSchematicData' tag, leading to arbitrary code execution.
This exploit leverages a buffer overflow vulnerability in Lattice Semiconductor PAC-Designer 6.21 by crafting a malicious .PAC file with an embedded shellcode payload. The exploit uses SEH overwrites to achieve remote code execution on Windows XP SP1.
This Metasploit module exploits a stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.21 by crafting a malicious .pac file with an oversized 'value' field in the 'SymbolicSchematicData' tag, leading to arbitrary code execution.