CVE-2015-0555
Samsung iPOLiS Device Manager 1.12.2 - Remote Code Execution via ReadConfigValue or WriteConfigValue Function
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-0555. PoCs published by Praveen Darshanam.
AI-analyzed exploit summary This exploit targets a heap spray vulnerability in Samsung iPOLiS 1.12.2 via the ReadConfigValue method of an ActiveX control. It uses a combination of heap spraying and shellcode execution to achieve remote code execution on vulnerable systems.
Description
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.
Exploits (2)
This exploit targets a heap spray vulnerability in Samsung iPOLiS 1.12.2 via the ReadConfigValue method of an ActiveX control. It uses a combination of heap spraying and shellcode execution to achieve remote code execution on vulnerable systems.
This is a working proof-of-concept exploit for CVE-2015-0555, targeting a buffer overflow vulnerability in Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX control. The exploit triggers a stack-based buffer overflow via the WriteConfigValue method, leading to an ACCESS_VIOLATION and potential remote code execution.