CVE-2012-6275
BigAntSoft BigAnt IM Message Server - Stack-Based Buffer Overflow via SCH or DUPF Request
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-6275.
PoCs published by Metasploit, Hamburgers Maccoy, juan vazquez, including Metasploit module exploits/windows/misc/bigant_server_sch_dupf_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.97 SP7 via crafted SCH and DUPF requests, achieving remote code execution. It uses ROP techniques for Windows 2003 SP2 and direct EIP control for Windows XP SP3.
Description
Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in a DUPF request.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.97 SP7 via crafted SCH and DUPF requests, achieving remote code execution. It uses ROP techniques for Windows 2003 SP2 and direct EIP control for Windows XP SP3.
This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.97 SP7 by sending maliciously crafted SCH and DUPF requests, leading to remote code execution. The exploit leverages ROP chains and precise memory manipulation to bypass protections and execute payloads.