CVE-2013-6935
VideoCharge Watermark Master 2.2.23 - Remote Code Execution via Long SourcePath in WCF File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-6935.
PoCs published by metacom, metacom, Andrew Smith, including Metasploit module exploits/windows/fileformat/watermark_master.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in Watermark Master 2.2.23 via a maliciously crafted .wcf file. It uses an SEH overwrite technique with a custom ROP chain to execute arbitrary shellcode, which in this case spawns calc.exe.
Description
Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file.
Exploits (2)
This exploit leverages a buffer overflow vulnerability in Watermark Master 2.2.23 via a maliciously crafted .wcf file. It uses an SEH overwrite technique with a custom ROP chain to execute arbitrary shellcode, which in this case spawns calc.exe.
This Metasploit module exploits a stack-based buffer overflow in Watermark Master 2.2.23 via a maliciously crafted .WCF file. It leverages SEH overwrites to achieve remote code execution on Windows systems.