CVE-2012-4333
Samsung NET-i viewer 1.37.120316 - Remote Code Execution via BackupToAvi Method
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-4333.
PoCs published by Metasploit, Luigi Auriemma, Luigi Auriemma, juan vazquez, including Metasploit module exploits/windows/browser/samsung_neti_wiewer_backuptoavi_bof.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Samsung NET-i viewer's CNC_Ctrl.dll ActiveX control via a long string in the BackupToAvi method, leading to remote code execution.
Description
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute arbitrary code via a long string in the fname parameter. NOTE: some of these details are obtained from third party information.
Exploits (3)
This Metasploit module exploits a buffer overflow in Samsung NET-i viewer's CNC_Ctrl.dll ActiveX control via a long string in the BackupToAvi method, leading to remote code execution.
This is a technical writeup by Luigi Auriemma detailing three vulnerabilities in Samsung NET-i ware, including an endless loop in remote services, code execution in the ConnectDDNS ActiveX, and a stack overflow in the BackupToAvi ActiveX. The writeup provides assembly-level analysis and references external PoC tools.
This Metasploit module exploits a buffer overflow vulnerability in the Samsung NET-i Viewer ActiveX control (CNC_Ctrl.dll) via the BackupToAvi method. It leverages a long string in the fname parameter to trigger an integer overflow, leading to remote code execution.