Exploitation Summary
EIP tracks 5 public exploits for CVE-2014-0980.
PoCs published by Metasploit, Andrew Smith, Muhamad Fadzil Ramli, including Metasploit module exploits/windows/fileformat/publishit_pui.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Publish-It via a crafted .PUI file, leveraging SEH overwrite for arbitrary code execution. It uses a template file, NOP sleds, and a payload to trigger the vulnerability.
Description
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.
Exploits (5)
This Metasploit module exploits a stack-based buffer overflow in Publish-It via a crafted .PUI file, leveraging SEH overwrite for arbitrary code execution. It uses a template file, NOP sleds, and a payload to trigger the vulnerability.
This exploit targets a buffer overflow vulnerability in Publish-It 3.6d, leveraging SEH (Structured Exception Handler) overwrites to achieve remote code execution. The payload is embedded in a malformed file designed to trigger the vulnerability when processed by the target software.
This exploit targets a SEH buffer overflow vulnerability in Publish-It 3.6d by crafting a malicious .pui file. The exploit leverages a long string of bytes to trigger the overflow, potentially allowing arbitrary code execution when the file is opened with 'Automatic Preview' enabled.
This advisory describes a buffer overflow vulnerability in Publish-It software when processing .PUI files, allowing arbitrary code execution. The proof of concept demonstrates control over the EIP register with a crafted file.
This Metasploit module exploits a stack-based buffer overflow in Publish-It 3.6d via a crafted .PUI file, leveraging SEH overwrites to achieve remote code execution. The exploit constructs a malicious file with a payload, NOPs, and a structured exception handler bypass.